last executing test programs:

6m2.886289445s ago: executing program 32 (id=455):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0)

5m36.078638952s ago: executing program 33 (id=620):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963762c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c739ef0386f6e616d653d6c6f7765722c757466383d312c00"], 0xfd, 0x2a0, &(0x7f0000000540)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00170000000000120000f1850000007d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
unshare(0x4000400)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x122}}, 0x4008090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010001fff0000000000", @ANYRES32=0x0, @ANYBLOB="83efffff00000000180012800e00010077697265677561", @ANYRES32], 0x40}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
setreuid(0xee00, 0x0)
syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000800)=ANY=[@ANYBLOB="00f3ed8d62407e0f69b4040acae51ee2fbfd4b7fd846d20351dd325d154c99821a6e017712af89a147a9e85d4ec366c62182b1a5ed02f910373c61fba04ebe05c299ed67c26307a39bd5469783197bf9f27e505ae86970c3f56ff891d1bf672de5df51a23d8537a89953c51bbcc05f3fc38665aa333fe52f45fda357ab2d5fb232834b9f"], 0x4, 0x662, &(0x7f00000008c0)="$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")
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x8, 0x0, 0x9, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = msgget$private(0x0, 0x20)
msgrcv(r5, 0x0, 0x2c, 0x3, 0x3000)
msgctl$IPC_RMID(r5, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r0, 0x1, 0x1, 0x40, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r7, 0xc0, &(0x7f0000000640)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r8}, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map=0x1, r0, 0x2d, 0x28, 0x0, @void, @void, @void, @value=r8, r6}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socket$nl_sock_diag(0x10, 0x3, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$can_raw(0x1d, 0x3, 0x1)

4m21.717637375s ago: executing program 6 (id=2599):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000000206050000000000000000000000000011000300686173683a69702c6d61726b000000000900020073797a30000000000500040000000000050005000a0000000500010006"], 0x4c}, 0x1, 0x7000000}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000306090200000000000000000000000005000100"], 0x1c}}, 0x0)

4m21.681996424s ago: executing program 6 (id=2601):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

4m21.654984554s ago: executing program 6 (id=2602):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0xef29}}, './file0\x00'})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x10, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7600000080000007f0100009500000095000000000000ef34da4924363d39c83147501bbb13b4eb6309ae355654e8af92b04c5a717866cd65a3f9fa0dde0b837af7d4b99c485ab6bfa6633936a7e4a1e4176953bddab5634a4406c4bec3ca078a0070495cfa406f4f3066a6939caaaabf7a25925c549516237f04f9f73e9ee883f074d3c353baa8a91da99894395aab176d19cffae6bf6143fcf1d8e3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x200000000200}, 0x18)
syz_io_uring_setup(0x55fb, &(0x7f0000000180)={0x0, 0xdc9, 0xc6, 0x2, 0xe6}, 0x0, 0x0)
mount(&(0x7f0000000bc0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='proc\x00', 0x40000, &(0x7f0000000c80)='&+*#\xb2(+(%}&9/{:#\x00')
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x101}, 0x18)
r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$selinux_access(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000d80)={0x0, &(0x7f0000000140)}, 0x10)
write$rfkill(r0, &(0x7f0000000080)={0x3, 0x0, 0x3, 0x1, 0x1}, 0x8)
r6 = shmget(0x1, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'wlc\x00', 0x8, 0x8001, 0x56}, 0x2c)
connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route(r7, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0015000000000000140035007767300000fd7b82c3b8ea0000000000000000000000dab7db118477bda4567abfe1650813ebf236a22c9ec34dd839e10773081f7e644fd902a7eaf5e62659ff4302b7083ca446ee32df4d07fa2cf90103b022e6d2ee46889e6ef353ea88095f9dc2cc078c20bddc513351b50df6d8b70e56b5c2f871b8c77ac685f8aa0bfc8d47f18a3d37c55b53260c8b25738c9c217558dfe8760b1668c48ffb"], 0x34}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x538, 0xffffffff, 0x168, 0x370, 0x370, 0xffffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffff00, 0xff000000, 0xff], 'batadv_slave_1\x00', 'veth0_to_batadv\x00', {}, {}, 0x73, 0xa, 0x0, 0x4}, 0x0, 0x140, 0x168, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wlan0\x00', {}, 'wg2\x00', {0xff}}}, @common=@frag={{0x30}, {[0x5, 0xc62], 0x3, 0x0, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@private1, @private1, [0xffffff00, 0x0, 0xf1636f6624edcf57, 0xffffff00], [0x7f, 0x0, 0xff, 0xffffffff], 'pimreg\x00', 'geneve0\x00', {}, {}, 0x32, 0x7, 0x4, 0x9}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x98, [0x5, 0x685], 0x6, 0x1a, 0x1, [@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @empty, @private2, @mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'], 0x2}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0xa1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)
shmat(r6, &(0x7f0000ff6000/0x9000)=nil, 0x2000)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = epoll_create(0x3ff)
r9 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, 0x0)

4m21.583046794s ago: executing program 6 (id=2607):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0, &(0x7f00000005c0)}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4ef47530860f7b73289cd0bae1f800090000050000000000001c14000000000058a677a5b1a2ae5ac83627d65cc8b3ae5cafb6f675885c9b8e2586aa454ac0d77312f1e4dd6eda612dae5fb765d3e58da85be8cd1b9fe2812ecfd5dfaaa2038e93c6890f22a7948b", @ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4100)
r3 = socket$inet6(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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")
rmdir(&(0x7f0000000180)='./file0/../file0\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0)
sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
write$char_usb(r4, &(0x7f0000000080)="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", 0xfe)

4m21.436841174s ago: executing program 6 (id=2609):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

4m21.159220782s ago: executing program 6 (id=2612):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x6}, 0x1206c, 0x80, 0xb, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000780)={'vxcan1\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x3}, 0x18)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)

4m21.158191382s ago: executing program 34 (id=2612):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x6}, 0x1206c, 0x80, 0xb, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000780)={'vxcan1\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x3}, 0x18)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)

2m14.10197349s ago: executing program 5 (id=5019):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) (fail_nth: 16)

2m13.797631329s ago: executing program 5 (id=5023):
socket$inet6(0xa, 0x2, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x1, 0x5, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x2f, 0x0, @remote, @rand_addr=0x64010100}}}})
socket$packet(0x11, 0x3, 0x300)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120000000000bd6b6e000000000006000000000000000000000000000000ac1e0001000000000000000000000000e000000200000000000000000000000005000500000000000a00000000000000fc00000000000000000000ed24000000000000000000000008001900"], 0xe0}}, 0x10044)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36)
setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4)
recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/25, 0x19}, 0xfffffbff}], 0x1, 0x45833af92e4b39ff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000022, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0)
mmap(&(0x7f000030f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000300), 0x6)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000000)={0x2, {0x8, 0x200, 0xfffffffffffffbff, 0x8000, 0xb0ee}})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x1000}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)

2m13.613187688s ago: executing program 5 (id=5027):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc004)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004000)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a030200000000000000000200ffff0900020073797a30000000000900010073797a300000800054000380080001400000000008000240000000004000038014000100776732000000000000000000000000001400010074"], 0xa8}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0)

2m13.563432848s ago: executing program 5 (id=5030):
init_module(&(0x7f0000001a00)=ANY=[@ANYBLOB="7f454c4610030607010400000000000003000300dd3e48127cffd9c72affffff400000000000000004000000000000000600000007003800010006000300800051e57464a00c000005000000000000000900000000000000020000000000000008000000000000000300000000000000ffffffff00000000"], 0x78, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r1, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f00000007c0)="$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")
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4)
recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000300)='./file0/../file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb)
mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f00000002c0)=""/250)

2m13.378720837s ago: executing program 5 (id=5037):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0xdc, &(0x7f0000000880)="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"})

2m13.190380057s ago: executing program 5 (id=5042):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
setresuid(0xee00, 0xee00, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)

2m13.189538997s ago: executing program 35 (id=5042):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
setresuid(0xee00, 0xee00, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)

1m11.225759312s ago: executing program 1 (id=6268):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0)
dup3(r1, r2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005f"], 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6b3aef2, '\x00', 0x0, r4, 0x3, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r5 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r8 = dup(r7)
write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes128, 0x1, @desc3})
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000100))
r9 = syz_pidfd_open(r5, 0x0)
pidfd_getfd(r9, 0xffffffffffffffff, 0x0)
setrlimit(0x0, 0x0)
r10 = dup2(r2, r3)
ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x6, 0x7, &(0x7f00000017c0)="c6703887d36a1d93795f95a9c5ea6bcb55822c6c3ffef4719c7e97c32f41a8751d722123226be39469bfaf7c68808603b9fb9de063253bd8daa83e89ffb21cac76ad4664254bd227a5062bd78f0d46b98d6d7fe3728e5da4f7e5d2d0b2fababaa03d8847eaca6a0157661745cf327d5212b1cb3433007270f7d6ace57920536ad5144fa37ce0e4c696f87d639b46dc765f838ecefc240f5b9c6bfb8ec8ac875d49b3d37e55ef516e319ce0b13c89020dd99efbfe133ce7b55cfb759c1653d0a8208e073646449591c2336eb26857cda8d75ff0786cb3693af39bfca040bfe66aa94eff5f649c7e7be121078d1acbc8f4e020c763eaa40f53aa93965138bcae2932746ceee00a38bcfe6705211f75c84ddd0ed1784c96df1c8ef0155c003248e4f07e8c2a3b9a0264df4743abc6c88aeeff0dce889b1146e93f0ac2a814b3e1b19a74b6a964946929847e8472fb913a0a84cc78989b35a7fcc4b18312fffae88efa8666f91975ad7af9c242d2f5eaeedc5ce6de7d7c4a75f9eba44e8fb579773cf4e9167edbec86b25543b32347361dfb2d1696abeeada814e4cc98ac591fa4a9c69c1bfa2affbdd61d41b8226108552ec63a795c15417cb38fb40d1c1825ee254dcabdcb8859451673ef8932b277716936b4d113a277ba940314b789e8fcf8bba8cb736d5af70c91537ad46fc0602cd359def9a4911f5eef7af89eaab768f8708327d34019fab7110715922e87bda2b02dc133092b354b5302456f3851e60cb463d1d9ddd086eab154395625fe1801bcd10b277ea3d68c5a8c254d34d6de8488d45787196744db8680a203bcba6b9ca33e4fab21507cbe47c015887836100e007abc544b02b8c9215b5a5b49fd6bc63d1026f2a6f70de64af9908572149d5f0b4e7d0a00e960dfdfb89a21b6103b7d313791ca79a416c4605b93ccb3d564e393a9747bbbf6c1d54e1b10a427baa0d8311746808e8987a4b4bcf0126b1d1bc3f56b4f8163278043d319a6fadd4e967801d718fff1ccfaca3cec1fd4035306e1477e85574ef3863e518d817752cfc572573f369a6f916953a8fc4e099c1b48bd76862d5c4f94e38e8f8b5aaadb33b976d20f7e26e67d01af140d7db1a8815765c23e34f8794dc0c70e8671f7d7901f8fe414544a459139c1de4d51da97e5e583ab0ad16a8c1b22526d7b93b268ff9ed264a89bba72bd7797851a16f33c796994ce17ab3e8c2b8838bcaec537a8eefe5dec0e4c34a1e1e1d5571271b75c7b454fb6bc9d512d40fa71c5913d3b4c3a9e8b5f191d06a5112f4a1fe97b42356af2ed18a5ee3b2f0e0d4048dedf06c8450f6e6760210c16f19ebd99009e22a322a32ed3b87d3f990337029d76fec207550bf81fdc49cdfdae9c792e786836af56c6d26debed97dbdd52ac1f80a0421c3970010f5d143046fc9c9b221d252ed171746e39f35a31c56f4e4070eab5706aa4707684b0ff8a729010961d439877c20021dfc39ccd4aae40c217220397af6420f3c09b7710489af10855cb223efae0d388da38af87c1a43d9dca145821c09af712b8dc890375fcac7911cc661a3e69d1f80f568c7cdcd46c75889f9aad447bfa1c19c1904bb469c177dc3b011efe888ffab3c1bde8290527cc9329916897b6747d0121c1e41bf403cd54feeadf71112bbf275fb7a1366ee9edb6cac1ed37fda107952c68510f8caccc55015e67583cd95310e923b56d0fcebabf19f45be81f0ee8e13ffaaa2337a7e981fc2efc71d6a4b517469de64ab65e8e7b31c8991e46ebd4f709ffb6673bf2a1b207b34d5318801d04aa83d8d02707d1eab632c24de8724aa6858074e9bb4d1403fc60fc208e866866e2d33163b1f2d3e4b0c33d75c5587923b6dc9cbf17a80aff0442d79a026a023a3e21cf5f3c212f5ae24c9a90caa546df196e4af7520d9046c76361bddce3b5883e09e65209df3a089d2710f5712348cb1fd4b36359d51b89961c4c56c6d35fdf58f688c4022a898663adf8f68ea71edec715072dbb3ee9abe07a6b007d9bf8280cf22c703616553ad0929d4871b0fd24d0fb7214f3e58172d0e1b52ab16735d5add7a6dd3b15e58803c7950f463b37401e3658564ff1a311d18aabb763655e9e9ddc4bd8643119af133a6a49ac7530153163a38c5ce6a8ad65ac0bcf8939d8ed9df83ae5754933ea91e7b9159828ef8465cc90efc1c5c46bea5554666f8ca11d5e03c00decf250b27afb230376997e87432ca12f124e6b015c18faedcc8c2ae60ea474779c69542a7fa485f4d4736b11985352155cd8bc5178087a6b023f147fd374a00f67a14d01307cd4cc624d5a39383e9358e21975574c369ed2f693030c67ed1f61a31ced3e8c2dccb076ba94fb56693e23b50b8054a9a1a8d9c91782568e4fd7ac6b5809fe03023b06f78f54d4b20f67281caf2822a0ead0061a6ac053b04cd74780686e200d7e253024cd81f766f88c109fb3f1218922c51e9e41eef8fe06605d7e1b85cda23a22612ce0677f6082f83fdc3185179af2ac7c746b9d90ccd29a1276499c726f53e4097090ce0455ee07c692429e3448f83ff6eeec38d8a81b39a0bd7b85dd5f463d7475576de0170926f7b4d6744de0776cfaa82bb0c4252a77578da0c99dcaf53740d8a18334e5c40cb0693d1c5cddccf89e74f17816957124791c2ec372843a5563dd4de59a00475d5b5d7ba54a612c9c6252cab33c0d6aa1454bb6fe261b8aac642b6fb6bae904ac3609ae1bf18064c8cf1a78f4d31c25c97b44e56662a14332727e10f69cc5d94629b9fb9fd06165bf17e9ac1893de9861710857b8c549b0e0412a6235e02863af311c9cf2043c5ad4ec0483acdaedeebd8f3b283954ce821854c6bd20b60e06341b9c68c665470d3a9ffd240973728cf22e56326b56aa373b1e2c728f6d8b3ee78ef7f7bc6d53247d9570a6667bdcfccb43db77caa2fbde078631252d570e01718891618d56680bfda1dad3f60bbd63e28a28cd8587874bc11970d940e228c8b6d33d364d2f4ad6c4c079b18f202c1faa82f99c28ad4397e291c66376dde22560e53ee199aec8d9a0c4ef7e6b449dc0554a4ead2d1f45853012fbd052f769ae9ab393b7b85a3e157778f05655c55e5d7b489f5ed89a9606589c42868a8d266f3b26540037de6b1baf35b19390ca1065e8adcb07fccf4c3531226443e650d172f1448b7dae04fbe783d7d52d6f9dcd48c5534d09da7f31080a4aa6987f03432c11739bbb7de2f6765be26b4913af05e5b29f74a666ca688314322f51f8bb83d9b50fde7e540c417a3e5588edc640ba638567f66518caeb7955a263f29dcc74680d6bf6cc9854c4c0fca6c8201e2b5e6f5ff0a3162e30918a6c2a824253568db5a2bebcaee51f7933c735840d690db5c2da2d1dd9a8bd822edf355148b6e40e34e53cc497d170a5838ed07dff3c1ef91bc51e61c4bef9f5054e151c5c5f834dc4b70920c2fa0e97b27fd83eac957721e00628545d5483507556501a738b3b8a6b0de586bcbbb5678ea4cd8ebb9d1fff4ae857541773bb19c07f8d82972d90116ec1452870515efbe99784ec1880f3bb73b73cfb89a3ca8ea84caf468be858a17a7ecf0168fb5be3f9d724c39b6b9c290da75558011e1f2528e8daf261e5d9884c0e6c9b1377c830279afdde47e4d754e54bbd6696449ebc21bc68b8becdeea46a94a203e9695424bf65592610cc8abb31f848942f2166d6dc14c363e8d72c31928afc586a7c763ecb2a6a4e8bb6c5e280e4f9f028048f57b551f4a8137af54c9c50d224da47fce100c450dbb8c492e1da77c1b48f39cc4fad09bff6ab574b206aa4577fee1a2705f2a628e912681de62f4fe0d7a649815958cbefb17f8ebd40d8b4435ea28d9e591436d001a993b75a34ed0782ae69fe4d491f6b3104987f455f302738eec63b94b9856e0ceddbcb5067b90ff3568f97e32bfc93543f0fe9a255274bf3b3e4e2e006203c059c5046b51dc21e2dda0391613c961aab4d28920b6433fb568fdf893bd55e9a6d822bf63e71f9da7398e2c3fe624afe40c498b5494629d73b159b408640f89196275b9b3669bde1acdd689b5d2e0a0bf1a51410b6cca49303111218dd31bf7f0c7798dc11e432fea2bf35e4f952fd59bb4747399f9790c3784534450a950adae16e533459d10347373da4327536a22743788538fbee456e8d4ce3fe8d4c54d1e015d6b5ba7f5b476eae1facb2721d296b3c68f5d389ee0b8ebcc5c3b5208e50fc1b8c44801b05d11d065f10cd39498819b78ea2ec4071b19e531f0f82db1a9d6b6d23919b0b7e91ebf7e8bb40e2cfa2cb6b7029900870d9d2ed64274a63043a40eab630caa87d7ba84837345837563baf91d8dbb1c30349dae98f6a1f050924d5486d27ddf3bc8713c94bf84aba62e0329b123d6500b7224ac5f7dead96e63716c0b8532900832560dee029e8d2ef3f1d7e7ffd15b538bf4aa7384c953553cda65d413e1d5d22fc9421313841c50bb1e1f25020282050ce121988650c944fdca09f1e9b1eea54f65abce4f067c6fec298af5cf89fed740630a191c8f1db8fc9380f024069f336d99eafb3b9dba20fb7bab7410848457bb4b2eb245d78dddc6bb421014a76b782df33934c1d78071436637711d8e0d1ed2aab64034010918a2440dd4a6f7d64012540d8206ebd8b9b1048c2b944fc3f63fe80061fedaee70bb8b434895759dfe8487f1b6fbd7f1553b6b9cfa8f7087eecdc1d35e790498f0757e54348320f9fca85f844e8ddb43f703b296ec8b3870d1bf575da04dfb2d0296ece0e6663a51e0faa78da5ddb0aa9293b7626aa5aa9504c77d945c1c030090ef4dc6dc5351bd8d366994e389a882b4fff1bcfef4ca35159788c74aa6c0d9f6079340de88f9222fac466f5dd86c856928fa1385568e248c28f0cf5fd6a30605895eaf44b93615ccf21e4993deff7fbe7816e4c20b90d0e863aebb0c790ea9a221c2f529453ed7a441e74e7cf1eaf753697b3fb5ba1e2067bfa2568d956b283e1f6a4b7ac6aaae318256750977877b3b9cd9dc516455ec2d28f7223d6adba115d7b261f7874c35887d2aca0b2d15fcb1077f41d2a5ce048eb770545df25de0e6650d1461328120e500ae27c45b5ca9217200f73e63573815169d918536ab8cedcdba84d0064be069f06ec5d9545c28172f5da3f37f76b15f7e198dd01a73e0ee469262d56740327cbf4bf107919f78644be85b44977f91e22ae4f29b9589f9250244888f7cc405fd86c42d76df527707f9214474b4d8f494545895dd38b1caf8da950598c7e69656d226eec1fe53c209f751469f160489a1b1ac81de5d2244bc98ddeb08a3d172f0a1b5b1ce80856f64c030e8073bd743d485637fc4ddcb2ff52d737d2977a8c36fdd5b60958401db14679a601af4b581eea49c7f9198854067cf2dd9f068038959c703e26ddb250cac917336728c0b93f0c3abdd1fd2aae3b37c599f668a01462271f0a5162582cf244c9c8e31ef3fa0038fc6ee6bd564754b758fe59e3639974a69141fa8711f653df259e6292fda42204200c0b4b442ccd392729639691d6545e77fd089a81bd92c49d39ce245ff3ef03e92aa7a1c2a8ffde2a02cee75817c4a41bf237066d9710cd7a93103c7fda5b544e4646b61fc550df4da07baaf06b9ff4bd1fe739de3445ea04cffab436ceb5dc47672fad4fee4b157ce3d99f0d391c00b56801b76efe734ae45dcdfd2d8e70a8968f0689f6a7b7708011f70f05e06f01af4b15821532458ef3108c3a79c34ec609cab37389a07546306ef19411a8"})
sendmsg$key(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000440)=ANY=[], 0x118}}, 0x0)
fadvise64(0xffffffffffffffff, 0x5, 0x200000000000006, 0x0)

1m9.719545156s ago: executing program 1 (id=6273):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0x7f, 0x67)
ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000000))

1m9.618954345s ago: executing program 1 (id=6274):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341)
ioctl$USBDEVFS_IOCTL(r1, 0xc00c5512, &(0x7f0000000200)=@usbdevfs_driver={0x1, 0x1, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
truncate(&(0x7f0000000040)='./file0\x00', 0xff8c)

1m9.409795445s ago: executing program 1 (id=6283):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000)={[{@bsdgroups}, {@grpquota}, {@init_itable}, {@user_xattr}, {@nomblk_io_submit}]}, 0x2, 0xbb8, &(0x7f00000017c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='syzkaller\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_dev$evdev(0x0, 0x0, 0x54f000)
syz_open_dev$vcsa(0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
gettid()
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
waitid(0x1, r1, 0x0, 0x4, 0x0)
capset(0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000680)="89000000120081ae08060cdc030ec0007f03e3f70100000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b81fdc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed00fa8af92347514f0b56a20ff27fff00e100"/137, 0x89}], 0x1}, 0x0)
fcntl$setflags(r0, 0x2, 0x0)
r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0xfffffffc, 0x400, 0x3, 0x4a}, &(0x7f0000000100)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
unlink(&(0x7f00000000c0)='./file1\x00')
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1})
io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
io_uring_enter(r6, 0xe5d, 0x239, 0x8, &(0x7f0000000280)={[0xfff]}, 0x8)
fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)

1m8.750436392s ago: executing program 1 (id=6286):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xbe69ae51be7b2c52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, 0x0, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x4000)

1m7.075449306s ago: executing program 1 (id=6316):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341)
ioctl$USBDEVFS_IOCTL(r1, 0xc00c5512, &(0x7f0000000200)=@usbdevfs_driver={0x1, 0x1, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
truncate(&(0x7f0000000040)='./file0\x00', 0xff8c)

1m7.009563245s ago: executing program 36 (id=6316):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341)
ioctl$USBDEVFS_IOCTL(r1, 0xc00c5512, &(0x7f0000000200)=@usbdevfs_driver={0x1, 0x1, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
truncate(&(0x7f0000000040)='./file0\x00', 0xff8c)

59.690383016s ago: executing program 8 (id=6424):
open(0x0, 0x2a4c0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
unshare(0x20000400)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700), 0x200200, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x4000000000005, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea4, '.\x00'}})

59.670377616s ago: executing program 8 (id=6425):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (fail_nth: 10)

59.289901845s ago: executing program 8 (id=6428):
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x7, 0x16df9388ea91aa9b}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240008c0}, 0x0)

58.715229122s ago: executing program 8 (id=6432):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

58.271766941s ago: executing program 8 (id=6436):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32=<r1=>0xffffffffffffffff], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000580)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x4a}}}}}, 0x28}}, 0x0)

57.884191479s ago: executing program 8 (id=6448):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
syz_open_dev$MSR(&(0x7f0000000240), 0x1, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4c", 0x1d}], 0x1}, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000002540)=0x1)

57.823348779s ago: executing program 37 (id=6448):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
syz_open_dev$MSR(&(0x7f0000000240), 0x1, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4c", 0x1d}], 0x1}, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000002540)=0x1)

52.784398799s ago: executing program 9 (id=6531):
pipe2(&(0x7f0000001cc0), 0x800)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000600)=0x6db7, 0x4)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000007000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

52.402025938s ago: executing program 9 (id=6536):
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000380)=""/87, 0x57}, {&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000680)=""/126, 0x7e}, {&(0x7f0000000700)=""/214, 0xd6}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x7, &(0x7f0000000880)=""/196, 0xc4}, 0x40002021)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1e6, 0x0, &(0x7f0000000980)="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", 0x0, 0x6, 0xe8034000, 0x0, 0x90, &(0x7f0000000000), &(0x7f0000001b80)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x50)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r4, &(0x7f0000000080), 0x76e5467)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x150, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
r7 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', r7})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x4, 0x0, 0x0)

51.882871385s ago: executing program 9 (id=6547):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a31000000002000048014000300"], 0xd4}}, 0x0)

51.798280125s ago: executing program 9 (id=6552):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16=<r0=>0x0, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cd9ae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64=<r1=>0xffffffffffffffff], 0x8, 0x2f4, &(0x7f0000000880)="$eJzs3U1PE1sYwPGnLxRaAsPi5t5cE8OJbnQzgepaaQwkxiYSpMaXxGSQqTYdWzLTYGqM6Mqt8UO4ICzZkShfgI073bhxx8bEhSyMYzqdodAOb6VQAv9fQubJnPNMz+kMyXMmzLB+792zYt7R80ZFon1KIiIiGyJDEpVAxN9GvTghW72Wy/0/v5y/c//BrUw2Oz6l1ERm+kpaKTU4/PH5y6TfbaVX1oYerf9If1/7d+3/9T/TTwuOKjiqVK4oQ82Uv1WMGctUswWnqCs1aZmGY6pCyTHtenu53p63ynNzVWWUZgdSc7bpOMooVVXRrKpKWVXsqoo9MQolpeu6GkgJ9pJbnJoyMm0m93V4MDgitp0xYiKSbGnJLXZlQAAAoKua6/+oqE7W/0sXViv9d5cH/fp/JRFW/1/9Wj/Wtvq/Vl2G1v/B54fW/8bB6v/WiuhsOVT9j5NhONGyK9IIa412xkj5v7+eNw+XRqTn2AYIAAAAAAAAAAAAAAAAAAAAAAAOZ8N1Ndd1tWDrxkXEdbVe/wFv198fkhoTketdGDI6qOX8+z/7OP84BRoP7sUHRay387n5XH3rd1gVEUtMGRFNfnvXg68WB08eqZoh+WQt+PkL87mY15LJS8HLHxWtR5rzXXfiZnZ8VNVtz++R1Nb8tGjyT3h+OjQ/IZcubsnXRZPPj6Uslsx642jkvxpV6sbtbFN+0usHAAAAAMBpoKtNoet3Xd+pvZ6/ub5uvj8Qa6yvR0LX53E5F+/u3AEAAAAAOCuc6ouiYVmmvUuQlL37tB/Ej+jIwQz3mxX8LcPRzXSXIPjwbU3BP9jo+NcSOcDXskMQlXayhmuzUYedRXDbaKc+Mjl2/GfQC/57/+FX5w54bblvj5m2H8R2vwB4OTAAAABwCjWK/mDPWHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGXQcb0fr9hwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JvAAAA///+mQDw")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket$tipc(0x1e, 0x5, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10)
setresuid(0x0, 0xee00, 0x0)
sync()
r5 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
setsockopt$llc_int(r5, 0x10c, 0x8, &(0x7f0000000000)=0xcb5, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0100000004000000e27f00b400010000c3660040000000d6e2b6f9cea6a85178cb21cebafa9a233b20bae01cee9ce7054970e101307c6f247ac6e26b17ac63252a5235b2d445ed0f6f4f7f8288c7933e7e5dafd164306f770ec03c0f7ea5657d881e6132e50355ea2bdc6fc5c5af4eb41b4fc3aa6f973d9b922d67ec6107abed7192d8a145b36cd005156da45fa616a02c361042b5267ebdda0f1ac68a0f90a1007ee7a7a06bdd918400f2147eac5777d0a4cd275e3165acb49f954cdeca4b939fb2c5e60dc795c51530b5804e6eae3748ed", @ANYRES32, @ANYRES32=0x0, @ANYRES64=r5, @ANYRES16=r0], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18004f4b0010e2ffff17e3fffcff153f2ec30000e3a83f461c3d59834ecc5c85ed2e434801a271ffd6d85e9cfce92be81b20b61b8e100000000058e7656f606450588cf8b4d7bb3c79eda96661657af0c8b56f84edb01a159a9f68d5a056b56c629cd2c32e2eee72409b0249c64ad2f38bc3a79b000000ddf674632432123be2761df843744feabb59b6f8e2aa9848398f95c84d70487307e3b92ee12d234a6749278d5e1b", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000040), 0x1, 0x76a, &(0x7f0000000fc0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x18)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349f7f2})
sync()
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

51.498460094s ago: executing program 9 (id=6560):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004280)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x40015)

51.194457043s ago: executing program 9 (id=6565):
r0 = socket$inet6(0xa, 0x3, 0x3c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="00020201c1000000ff"], 0x18)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1)

51.194213143s ago: executing program 38 (id=6565):
r0 = socket$inet6(0xa, 0x3, 0x3c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="00020201c1000000ff"], 0x18)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1)

1.952731998s ago: executing program 0 (id=7422):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec970200140400fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
pipe(0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
set_robust_list(&(0x7f0000000380), 0x18)
syz_emit_ethernet(0x7a, &(0x7f0000002080)={@remote, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getpid()
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
mount$9p_rdma(&(0x7f0000000000), 0x0, &(0x7f0000000200), 0x800, &(0x7f0000000b80)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@rq={'rq', 0x3d, 0x5}}]}})

1.894583658s ago: executing program 2 (id=7423):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea4, '.\x00'}})

1.883724048s ago: executing program 2 (id=7424):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={<r2=>0xffffffffffffffff, 0xffffffffffffff00})
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14)
close_range(r2, 0xffffffffffffffff, 0x0)

1.858596748s ago: executing program 2 (id=7425):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfc, 0x7ffc0002}]})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x53, 0x0, &(0x7f0000000040))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x18)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
close(r3)
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
pwritev2(r4, 0x0, 0x0, 0x1400, 0x0, 0x3)
lstat(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = getuid()
setfsuid(r6)
mount$9p_xen(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f00000003c0), 0x10000, &(0x7f0000001cc0)={'trans=xen,', {[{@cache_loose}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@cache_none}, {@debug={'debug', 0x3d, 0x7}}, {@cache_loose}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@debug={'debug', 0x3d, 0x3}}], [{@fowner_lt={'fowner<', r6}}]}})
r7 = getuid()
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@debug}], [{@fowner_lt={'fowner<', r5}}, {@euid_lt={'euid<', r7}}, {@euid_lt={'euid<', r8}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x31, 0x31, 0x66, 0x0, 0x64, 0x30, 0x39], 0x2d, [0x33, 0x32, 0x37, 0x34], 0x2d, [0x38, 0x65, 0x66, 0x35], 0x2d, [0x61, 0x61, 0x65, 0x34], 0x2d, [0x34, 0x0, 0x30, 0x35, 0x62, 0x35, 0x63, 0x30]}}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, '-'}}]}})
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x140, 0x1a, 0x713, 0x70bd2c, 0x0, {{@in6=@loopback, @in=@multicast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@multicast2, {0x0, 0x432, 0x0, 0x0, 0x5}, {}, {}, 0x0, 0x4, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x140}}, 0x0)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
execveat(r10, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x1000)
tkill(0x0, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)

1.799976018s ago: executing program 2 (id=7426):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="00020201c1"], 0x18) (fail_nth: 3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x2, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

1.740255927s ago: executing program 7 (id=7428):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa2000000000000070212550000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0xf3d, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd=r2, 0x10, {0x0, r2}, 0x81, 0xe, 0x0, {0x0, r5, r2}})
io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="2400000002010104000000000000000001000009040002800c0019"], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4b18}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB]}, 0x78)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
mmap(&(0x7f000057e000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x402f2000)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x3)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x2, 0x7, 0x20, r10, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0xc, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)

1.538153767s ago: executing program 0 (id=7429):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1}, 0x18)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0)

1.503351496s ago: executing program 7 (id=7430):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161000a000000040000800400", @ANYRES32=r4], 0x1c}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x440008c0}, 0x20054)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0)

1.485103306s ago: executing program 0 (id=7431):
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40002, 0x800000000003}, 0x104a8a, 0x5dd8, 0x0, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0xfffffffffffffc01, &(0x7f0000ffc000/0x3000)=nil, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xb, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="180600000000010000202070250000000000202001000080ff00000000bfa100000000000007010000f8ffffffb702000003000200b703000000000000850000007300000095", @ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000580)='GPL\x00', 0x2000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
io_uring_setup(0x4896, &(0x7f00000003c0)={0x0, 0xfcd3, 0x3})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xd, &(0x7f0000000a40)=ANY=[@ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket$inet6(0xa, 0x40000080806, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40006, 0x500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01, 0xa5d7}, 0x408, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
keyctl$chown(0x4, 0x0, 0x0, 0xee01)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="6c6f61642064656661756c7420757365653a73797a6b616c6c677200203030303030303030303030303030303232333030203900f9af01f63b57205a175798cd409fcc452fb8670780eb898e71"], 0x34, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x2, 0x0, 0x2}) (fail_nth: 3)

1.447031316s ago: executing program 7 (id=7434):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa2000000000000070212550000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0xf3d, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd=r1, 0x10, {0x0, r1}, 0x81, 0xe, 0x0, {0x0, r4, r1}})
io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="2400000002010104000000000000000001000009040002800c0019"], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r7=>0x0})
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4b18}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r8 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB]}, 0x78)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
mmap(&(0x7f000057e000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x402f2000)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x3)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$KDFONTOP_SET(r10, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x2, 0x7, 0x20, r11, 0x6, '\x00', r7, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0xc, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)

1.179261415s ago: executing program 3 (id=7437):
syz_emit_ethernet(0x83, 0x0, 0x0)
socket(0x2, 0x2, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20)
bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r3, 0x4)

1.148560505s ago: executing program 3 (id=7438):
syz_clone(0x0, &(0x7f0000000000)="1117c7ea54ffecf86c542b3b478961f84834500a2acc73fc330c3c75e84904decf4e450716c98a2454f4a1f366cb3b4ceb76ec3dec696f2cfb90b6ba11b26d14cfebce722f3997320f39ffebe969b3f5af710f0a54e83fb8770d9d4e2edd8cbf704fe6bb6f59", 0x66, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="2a1f6c932e09cc41a1e432c5f4acab7562fcedd71e95c55d3ff9c6f1d9dff9548b1dc3521417c8edf0eb504bac6001e27abd716a387a9be80434da7a")
syz_read_part_table(0x593, &(0x7f00000005c0)="$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")

1.125116125s ago: executing program 7 (id=7439):
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000600)=0x6db7, 0x4)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000007000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r8 = dup(r7)
write$P9_RLERRORu(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="5300000007000046009ce6e7e68cce73c582dc6dfdbca736b02715df74ff"], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000000000000000715246a35a61e71df309c296617b2ccc3a4319d04eb26741db423497c8e671267b1aa104687630246a32c5dc0a9740e39a250894304ec699eb51925b6ec72c119cb7bc9974138a332b4e896c7f2ee916cf450efacd01c26644b090621f3cab3a553e49f3b751c76b5d7d0e26e83d8a7e40911406f0876283886184206ce8cdf6eb88bd0b", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',k'])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=','])
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea4, '.\x00'}})

790.964723ms ago: executing program 2 (id=7441):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa2000000000000070212550000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0xf3d, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd=r2, 0x10, {0x0, r2}, 0x81, 0xe, 0x0, {0x0, r5, r2}})
io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="2400000002010104000000000000000001000009040002800c0019"], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4b18}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB]}, 0x78)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
mmap(&(0x7f000057e000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x402f2000)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x3)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x2, 0x7, 0x20, r10, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0xc, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)

790.794203ms ago: executing program 3 (id=7442):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0)

671.534883ms ago: executing program 2 (id=7444):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
io_setup(0xb2, &(0x7f0000000200)=<r1=>0x0)
ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
shutdown(r0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10)
syz_usbip_server_init(0x3)
syz_usb_connect$cdc_ncm(0x6, 0x8a, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0x3, 0x50, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "4b7799"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x7, 0x8}, [@dmm={0x7, 0x24, 0x14, 0xb, 0x6}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x356f, [0x4, 0x5, 0x5, 0x5, 0x101, 0x9]}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x6, 0x21}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7f, 0xd, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x61, 0x3, 0xa8}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xfa, 0x9, 0x8, 0xff, 0x4}, 0x258, &(0x7f0000000880)={0x5, 0xf, 0x258, 0x6, [@generic={0xca, 0x10, 0x2, "8afbf41ce65f32f86c6c5dcb6d0ee62032297aa94752884462235cbca5644fa404b69bf719f4d4f66696edfde68d28dfc43e4d68ffa9aab2d77645779724db8ea973bb6fd6f872c6c48a3ad8550b960d157ddc53bada556dc187b2fc43417897949d1737706bdfe036e80fc156a9b467662400f9b1992166ed2e11f737c4b9ef1fc56e576b44b37211fdf6cf82b8e94ef6519d7a77819348dd66ef8fe070a7371cfb5a1611ff166856f16df84bdd39a1090602c1efcd1e35d547d46a9021cae3986273cc546e66"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xf8, 0x2, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x3, 0x9, 0x8, 0x6}, @generic={0xfd, 0x10, 0x2, "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"}, @generic={0x63, 0x10, 0x2, "881ebfa5bfe9a1da2b2137e120a19f90ce8f0a24ce23f849b1a6ae53a73ac35947c5a235c2f77cdd23d8a1ffe34925218b817ac0152dc1df2ac89fbf1f74a24036febfedb637c902ecff76a3cbae99bf29971f09c34568d60a0c104140f760a4"}, @ss_container_id={0x14, 0x10, 0x4, 0x57, "5236d622d28cfea87f9d13dc4d1df963"}]}, 0x4, [{0x6c, &(0x7f0000000300)=@string={0x6c, 0x3, "234cfb4eb6a78dcee41ba5c98fb0b79fb8fa06313beb3b59f030b0d18fab82ac888363f7698150ada01262afb75549e1fba9433e723ea3c75e99c271c8a6eb110fb60740af83dc5f94c4772fa3249b950678148d753e2e340530cae1a719dcba01a068f2e206db11890f"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x404}}, {0xb6, &(0x7f0000000640)=@string={0xb6, 0x3, "9213dd9f1e3e078ee74cc2f32d4a5e96b96bede01096a58d4529f326b5c07309d2c53a8088557092fe734248031ec686f37f0cf6509d342515f0d75cf514d0b81e0ca9cf8821eed2117d78705c07f4bd006c7579f37abb6ab661cf123d4151418db4e7d393d0e69b01f0c71ba1bf15e6d0d86dba95839a2069995323a7b4bee0a2f63b7400b9bb34ffcbfcee03fbbb7375900342624e28d6b9a58bcea203716b3de8ef551efee5348550d561427e3f7fc335edfe"}}, {0xec, &(0x7f0000000700)=@string={0xec, 0x3, "c032bd15851a8f702271a2cfa9c34ffc4010fc54e2eae58353a2680c63f2e1c690742112f03b59fc77a74e084dfe3cc2d0b1143a49da7ee9ee9aec9d5d3bc104dfa08bc0949fe4fdf4450ef9946917e48babad482c5f3d7d28d639003459a0aec8c94d64218257a0db28f14a7c23735a8016edf2c569e82e501caf588dba19e1fb8152bc7fbad9b9b56441a96c23e00cf124c86d2f616cfd994f582ca34dcabe0c38fb0a68868855d5e6fe0904e392a201c022c5bf611a37ccc4a5b088b7226ede1504ac3fa2d39c1c74a387959891452c6e010530c1d452adc56d430d5ce1402c7490d2c4055867369a"}}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000011424203"], 0x0)

638.519953ms ago: executing program 3 (id=7445):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

597.029783ms ago: executing program 3 (id=7447):
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x1e, 0x1, 0x0)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040), &(0x7f0000000080)=0x4)
connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10)
r4 = getuid()
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x1000000, &(0x7f00000003c0)={[{@i_version}, {@jqfmt_vfsold}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x61, 0x32, 0x63, 0x0, 0x32, 0x36, 0x65], 0x2d, [0x30, 0x36, 0x37, 0x34], 0x2d, [0x38, 0x34, 0x36, 0x37], 0x2d, [0x65, 0x31, 0x36, 0x32], 0x2d, [0x35, 0x39, 0x5, 0x33, 0x36, 0x34, 0x0, 0x30]}}}, {@euid_eq={'euid', 0x3d, r4}}, {@subj_type={'subj_type', 0x3d, '*:'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_gt={'fowner>', r4}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@fowner_gt={'fowner>', r4}}]}, 0x1, 0x784, &(0x7f00000007c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r5, 0x100, 0x0)
getdents64(r5, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f00000212c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="15df", 0x2}], 0x1}}], 0x1, 0x40001)
write$binfmt_elf64(r5, &(0x7f0000000f80)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xdc, 0xd4, 0x2, 0xfffffffffffffffc, 0x3, 0x3, 0x968, 0xca, 0x40, 0x273, 0x10, 0xf, 0x38, 0x1, 0x1, 0x1000, 0x6}, [{0x3, 0x3, 0x9, 0x4, 0x10, 0x205b0000000, 0x0, 0xffffffffffffff33}], "89eb5c048622d53f68fe48483103eeca4ce1c30c78477726be331d3c199344bc65541ace29fe27130591c9114d3422b36d0a7282692ad1078611eae578f81b79583d1c5809bac5d909c23ed48d9920f66b57f75f9728616ee67574e9561510dd6bf90dd76dc61babd272bf3217f88e67a8dfaf734a5b75972a60a0ea0bc54a6149e4537cf7c343b890", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x701)
splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0)
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4, 0x24e, &(0x7f0000000a00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
getuid()
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xb, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x47, @vifc_lcl_addr=@local, @remote}, 0x10)

515.101813ms ago: executing program 0 (id=7449):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r4}, &(0x7f0000000380), &(0x7f00000004c0)='%pS    \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000080)="1c", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfffffffffffffd2e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000740)='sys_enter\x00', r7}, 0x10)
fspick(0xffffffffffffff9c, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x13a, &(0x7f0000001b00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x24, 0x4, 0x0, 0x0, 0x12c, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local, {[@lsrr={0x83, 0x23, 0x4, [@rand_addr=0x64010100, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @private=0xa010101, @remote]}, @rr={0x7, 0x2b, 0x11, [@rand_addr=0x64010102, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x1d}, @remote, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast]}, @noop, @timestamp={0x44, 0x8, 0x7a, 0x0, 0x4, [0x1000]}, @ssrr={0x89, 0xf, 0xb1, [@empty, @multicast1, @broadcast]}, @end, @timestamp_addr={0x44, 0x6f, 0x50, 0x1, 0xc, [{@multicast1, 0x101}, {@rand_addr=0x64010102, 0x1ff}]}, @timestamp={0x44, 0x0, 0x58, 0x0, 0x5, [0xee, 0x101]}]}}, {0x800, 0x0, 0x9c, 0x0, @wg=@data={0x4, 0x0, 0x0, "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"}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}}, 0x20050800)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x1b, 0x5, 0x6e0, 0x2c8, 0x0, 0xffffffff, 0x518, 0x518, 0x610, 0x610, 0xffffffff, 0x610, 0x610, 0x5, &(0x7f00000003c0), {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x43}, [0xffffffff, 0xff000000, 0xff, 0xff000000], [0xff, 0x0, 0xffffffff, 0xff], 'team_slave_0\x00', 'xfrm0\x00', {0xff}, {}, 0x3b, 0x6, 0x2, 0x4}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x96}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@private=0xa010100, @ipv6=@local, @gre_key=0x7, @port=0x4e22}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], 'veth0\x00', 'veth0_macvtap\x00', {0xff}, {0xff}, 0x62, 0x8, 0x4, 0x3a}, 0x0, 0x180, 0x1b0, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x2, 0x1, [0xd, 0xff, 0x8001, 0x8, 0x1ff, 0xff, 0x5fc, 0x1f9, 0x9, 0x2, 0x6, 0x7, 0xe683, 0x2, 0x2, 0x8]}}, @common=@srh1={{0x90}, {0x2f, 0x3, 0x8, 0xf7, 0x9b3, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0x0, 0xffffffff, 0xff000000], [0xffffffff, 0xff, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x19a, 0x901}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x5, 0x1}, {0xffffffffffffffff, 0x5, 0x4}, 0x9, 0xfff}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x9, [0x1, 0x5], 0x6, 0x10, 0x2, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1d}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote], 0x2}}, @common=@ipv6header={{0x28}, {0xa9}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xa, @ipv4=@broadcast, @ipv6=@dev={0xfe, 0x80, '\x00', 0x42}, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0x0, 0xffffff00, 0xffffff00], [0x0, 0xff, 0xffffff00, 0xff], 'batadv0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x0, 0x5, 0x3, 0x2a}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"1193", 0x1}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740)

512.263493ms ago: executing program 4 (id=7450):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x5a1e}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0xa6db, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00'})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg1\x00'})
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x8}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x9}]}}}]}, 0x44}}, 0x0)
socket(0x10, 0x803, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x5a1e}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0xa6db, 0x8) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg1\x00'}) (async)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x8}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x9}]}}}]}, 0x44}}, 0x0) (async)

415.722162ms ago: executing program 7 (id=7451):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69)
close(r1)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

346.307912ms ago: executing program 0 (id=7452):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000008880)='ns/mnt\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000300)={0x1, &(0x7f0000000280)=[{0x5, 0xfd, 0x9, 0x800}]})
setns(r0, 0x2000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0xeaff, &(0x7f0000000200)={&(0x7f0000000040)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0)
r5 = syz_clone(0x58020400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x7, 0x2, {0x5788, 0x3f9d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048040}, 0x26000894)
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x4000)
lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000280)=@v3={0x3000000, [{0x8, 0x80000001}, {0x6, 0xc}], r9}, 0x18, 0x2)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r11}, 0x10)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007", @ANYRES32], 0x30}}, 0x0)
tkill(r5, 0x25)

345.743032ms ago: executing program 4 (id=7453):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec970200140400fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
pipe(0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
set_robust_list(&(0x7f0000000380), 0x18)
syz_emit_ethernet(0x7a, &(0x7f0000002080)={@remote, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getpid()
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', 0x0, 0x800, &(0x7f0000000b80)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@rq={'rq', 0x3d, 0x5}}]}})

305.068062ms ago: executing program 7 (id=7454):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/54, 0x36}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x20, 0x0) (fail_nth: 3)
sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0)

275.894922ms ago: executing program 4 (id=7455):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa2000000000000070212550000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0xf3d, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd=r2, 0x10, {0x0, r2}, 0x81, 0xe, 0x0, {0x0, r5, r2}})
io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="2400000002010104000000000000000001000009040002800c0019"], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4b18}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r8 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB]}, 0x78)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
mmap(&(0x7f000057e000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x402f2000)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x3)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$KDFONTOP_SET(r10, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x2, 0x7, 0x20, r11, 0x6, '\x00', r7, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0xc, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)

182.191711ms ago: executing program 0 (id=7456):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
prlimit64(0x0, 0x7, &(0x7f0000000240)={0x8, 0x6aaf}, &(0x7f00000004c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00'}, 0x18)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x88)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b0500000000000904"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x10, 0x3, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x80, 0x6, @link_local}, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006640)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000004800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40000001, 0x0, 0x8, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa369, 0x0, 0x8, 0x0, 0x84, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5f5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7e2, 0x0, 0x0, 0xd5, 0x7, 0x96e4, 0x0, 0x0, 0xa, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x80, 0x0, 0x0, 0x800, 0xfffff0e7, 0xfffffffd, 0xfff, 0x0, 0x0, 0x0, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x3, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {0xd, 0x0, 0x0, 0x80, 0x0, 0x2}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x890)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000c"], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

179.940161ms ago: executing program 4 (id=7457):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

147.035371ms ago: executing program 4 (id=7458):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x800000000000000}, 0x18)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x18}, 0x1, 0x7}, 0x0)

97.763081ms ago: executing program 4 (id=7459):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0x43, 0xa0, 0x118, 0x98, 0x2a0, 0x178, 0x178, 0x2a0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0xff000000, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0xd0, 0x118, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@connbytes={{0x38}, {[{}, {0xe}], 0x0, 0x2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xc, {0x80000001}}}}, {{@uncond, 0x0, 0x158, 0x188, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@rand_addr=0x64010101, [0x0, 0xffffff00, 0xff000000], @ipv4=@private=0xa010100, [0x0, 0x0, 0xffffff00, 0xff], @ipv4=@multicast1, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], @ipv6=@loopback, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], 0x7, 0xa, 0x5c, 0x4e24, 0x4e20, 0x4e23, 0x4e22, 0x40, 0xa2}, 0x80}}, @common=@icmp={{0x28}, {0x11, "bccf"}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000001ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0)
move_mount(r0, &(0x7f00000015c0)='./bus\x00', r4, &(0x7f0000002ac0)='./bus/file0\x00', 0x42)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000001480)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r7, 0x0, r9, 0x0, 0xf3a, 0x1000000000000000)
tee(r8, r6, 0x8, 0x0)
write$binfmt_script(r9, 0x0, 0xfffffe48)
modify_ldt$read_default(0x2, &(0x7f00000013c0)=""/189, 0xbd)
move_mount(0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x200)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 3 (id=7460):
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000600)=0x6db7, 0x4)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000007000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r8 = dup(r7)
write$P9_RLERRORu(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="5300000007000046009ce6e7e68cce73c582dc6dfdbca736b02715df74ff"], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000000000000000715246a35a61e71df309c296617b2ccc3a4319d04eb26741db423497c8e671267b1aa104687630246a32c5dc0a9740e39a250894304ec699eb51925b6ec72c119cb7bc9974138a332b4e896c7f2ee916cf450efacd01c26644b090621f3cab3a553e49f3b751c76b5d7d0e26e83d8a7e40911406f0876283886184206ce8cdf6eb88bd0b", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',k'])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=','])
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea4, '.\x00'}})

kernel console output (not intermixed with test programs):

_dirnotify+0x1e7/0x590
[  375.874537][T25609]  fcntl_dirnotify+0x1e7/0x590
[  375.879316][T25609]  ? vfs_write+0x596/0x920
[  375.883824][T25609]  ? putname+0xcf/0xf0
[  375.887957][T25609]  do_fcntl+0x650/0xe10
[  375.892208][T25609]  __se_sys_fcntl+0xbd/0x1b0
[  375.896814][T25609]  __x64_sys_fcntl+0x43/0x50
[  375.901413][T25609]  x64_sys_call+0x2129/0x2dc0
[  375.906196][T25609]  do_syscall_64+0xc9/0x1c0
[  375.910703][T25609]  ? clear_bhb_loop+0x55/0xb0
[  375.915431][T25609]  ? clear_bhb_loop+0x55/0xb0
[  375.920143][T25609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.926126][T25609] RIP: 0033:0x7f2fbe295d29
[  375.930545][T25609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.950243][T25609] RSP: 002b:00007f2fbc901038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  375.958678][T25609] RAX: ffffffffffffffda RBX: 00007f2fbe485fa0 RCX: 00007f2fbe295d29
[  375.966659][T25609] RDX: 000000000000003c RSI: 0000000000000402 RDI: 0000000000000005
[  375.974634][T25609] RBP: 00007f2fbc901090 R08: 0000000000000000 R09: 0000000000000000
[  375.982715][T25609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.990696][T25609] R13: 0000000000000000 R14: 00007f2fbe485fa0 R15: 00007fff7b16a6d8
[  375.998692][T25609]  </TASK>
[  376.094625][T25623] FAULT_INJECTION: forcing a failure.
[  376.094625][T25623] name failslab, interval 1, probability 0, space 0, times 0
[  376.107398][T25623] CPU: 0 UID: 0 PID: 25623 Comm: syz.3.6768 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  376.118194][T25623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  376.128263][T25623] Call Trace:
[  376.131548][T25623]  <TASK>
[  376.134530][T25623]  dump_stack_lvl+0xf2/0x150
[  376.139201][T25623]  dump_stack+0x15/0x1a
[  376.143465][T25623]  should_fail_ex+0x223/0x230
[  376.148192][T25623]  should_failslab+0x8f/0xb0
[  376.152803][T25623]  kmem_cache_alloc_node_noprof+0x59/0x320
[  376.158626][T25623]  ? __alloc_skb+0x10b/0x310
[  376.163254][T25623]  __alloc_skb+0x10b/0x310
[  376.167676][T25623]  ? audit_log_start+0x34c/0x6b0
[  376.172633][T25623]  audit_log_start+0x368/0x6b0
[  376.177443][T25623]  audit_seccomp+0x4b/0x130
[  376.181969][T25623]  __seccomp_filter+0x6fa/0x1180
[  376.186934][T25623]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  376.192638][T25623]  ? vfs_write+0x596/0x920
[  376.197123][T25623]  __secure_computing+0x9f/0x1c0
[  376.202275][T25623]  syscall_trace_enter+0xd1/0x1f0
[  376.207423][T25623]  ? fpregs_assert_state_consistent+0x83/0xa0
[  376.213550][T25623]  do_syscall_64+0xaa/0x1c0
[  376.218060][T25623]  ? clear_bhb_loop+0x55/0xb0
[  376.222797][T25623]  ? clear_bhb_loop+0x55/0xb0
[  376.227544][T25623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.233469][T25623] RIP: 0033:0x7f2fbe295d29
[  376.237967][T25623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.257587][T25623] RSP: 002b:00007f2fbc901038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  376.266011][T25623] RAX: ffffffffffffffda RBX: 00007f2fbe485fa0 RCX: 00007f2fbe295d29
[  376.274054][T25623] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c
[  376.282122][T25623] RBP: 00007f2fbc901090 R08: 0000000000000000 R09: 0000000000000000
[  376.290105][T25623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  376.298199][T25623] R13: 0000000000000000 R14: 00007f2fbe485fa0 R15: 00007fff7b16a6d8
[  376.306186][T25623]  </TASK>
[  376.351115][T25626] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  376.392407][T25626] netlink: 'syz.7.6769': attribute type 10 has an invalid length.
[  376.405888][T25626] geneve1: entered promiscuous mode
[  376.429540][T25626] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  376.474691][T25636] erspan1: entered promiscuous mode
[  376.581529][T25646] loop0: detected capacity change from 0 to 1024
[  376.600535][T25650] loop3: detected capacity change from 0 to 1024
[  376.619210][T25646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  376.648343][T25650] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  376.659401][T25650] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  376.669179][T25646] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28
[  376.681574][T25646] EXT4-fs (loop0): This should not happen!! Data will be lost
[  376.681574][T25646] 
[  376.686011][T25650] JBD2: no valid journal superblock found
[  376.691242][T25646] EXT4-fs (loop0): Total free blocks count 0
[  376.696970][T25650] EXT4-fs (loop3): Could not load journal inode
[  376.709330][T25646] EXT4-fs (loop0): Free/Dirty block details
[  376.715284][T25646] EXT4-fs (loop0): free_blocks=0
[  376.720283][T25646] EXT4-fs (loop0): dirty_blocks=0
[  376.725361][T25646] EXT4-fs (loop0): Block reservation details
[  376.731356][T25646] EXT4-fs (loop0): i_reserved_data_blocks=0
[  376.753145][T25650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6780'.
[  376.808344][T25650] geneve0: entered allmulticast mode
[  376.854902][T24760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.891305][T25670] FAULT_INJECTION: forcing a failure.
[  376.891305][T25670] name failslab, interval 1, probability 0, space 0, times 0
[  376.904002][T25670] CPU: 0 UID: 0 PID: 25670 Comm: syz.3.6788 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  376.914896][T25670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  376.924973][T25670] Call Trace:
[  376.928262][T25670]  <TASK>
[  376.931199][T25670]  dump_stack_lvl+0xf2/0x150
[  376.935829][T25670]  dump_stack+0x15/0x1a
[  376.940014][T25670]  should_fail_ex+0x223/0x230
[  376.944704][T25670]  should_failslab+0x8f/0xb0
[  376.949363][T25670]  kmem_cache_alloc_noprof+0x52/0x320
[  376.954820][T25670]  ? mas_alloc_nodes+0x1e3/0x490
[  376.959793][T25670]  mas_alloc_nodes+0x1e3/0x490
[  376.964572][T25670]  mas_preallocate+0x44a/0x650
[  376.969351][T25670]  __mmap_region+0x809/0x1400
[  376.974102][T25670]  mmap_region+0x164/0x1e0
[  376.978567][T25670]  do_mmap+0x718/0xb60
[  376.982662][T25670]  vm_mmap_pgoff+0x133/0x290
[  376.987349][T25670]  ksys_mmap_pgoff+0xd0/0x330
[  376.992116][T25670]  ? fpregs_assert_state_consistent+0x83/0xa0
[  376.998226][T25670]  x64_sys_call+0x1940/0x2dc0
[  377.002916][T25670]  do_syscall_64+0xc9/0x1c0
[  377.007500][T25670]  ? clear_bhb_loop+0x55/0xb0
[  377.012186][T25670]  ? clear_bhb_loop+0x55/0xb0
[  377.016903][T25670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.022850][T25670] RIP: 0033:0x7f2fbe295d63
[  377.027314][T25670] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[  377.046949][T25670] RSP: 002b:00007f2fbc900e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  377.055398][T25670] RAX: ffffffffffffffda RBX: 00000000000004be RCX: 00007f2fbe295d63
[  377.063545][T25670] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  377.071605][T25670] RBP: 0000000020000702 R08: 00000000ffffffff R09: 0000000000000000
[  377.079582][T25670] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007
[  377.087561][T25670] R13: 00007f2fbc900ef0 R14: 00007f2fbc900eb0 R15: 0000000020000280
[  377.095625][T25670]  </TASK>
[  377.345230][T25687] loop7: detected capacity change from 0 to 1024
[  377.358351][T25682] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  377.366583][T25682] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  377.380998][T25687] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.460636][T25697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6797'.
[  377.475840][T25697] geneve0: entered allmulticast mode
[  377.514194][T25701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6796'.
[  377.573625][T25708] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6800'.
[  377.688893][T22802] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.935870][T25728] loop0: detected capacity change from 0 to 1024
[  377.957360][T25728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.994008][T24760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.075362][T25735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6811'.
[  378.107901][T25735] lo speed is unknown, defaulting to 1000
[  378.243226][T25743] siw: device registration error -23
[  378.261875][T25751] FAULT_INJECTION: forcing a failure.
[  378.261875][T25751] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  378.275048][T25751] CPU: 0 UID: 0 PID: 25751 Comm: syz.7.6817 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  378.285908][T25751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  378.296060][T25751] Call Trace:
[  378.299386][T25751]  <TASK>
[  378.302335][T25751]  dump_stack_lvl+0xf2/0x150
[  378.306966][T25751]  dump_stack+0x15/0x1a
[  378.311217][T25751]  should_fail_ex+0x223/0x230
[  378.315919][T25751]  should_fail+0xb/0x10
[  378.320106][T25751]  should_fail_usercopy+0x1a/0x20
[  378.325260][T25751]  _copy_from_user+0x1e/0xb0
[  378.329946][T25751]  memdup_user_nul+0x65/0xd0
[  378.334609][T25751]  sel_write_enforce+0x9d/0x2e0
[  378.339494][T25751]  vfs_writev+0x3fb/0x880
[  378.343912][T25751]  ? __pfx_sel_write_enforce+0x10/0x10
[  378.349417][T25751]  ? mutex_lock+0xd/0x40
[  378.353760][T25751]  do_writev+0xf4/0x220
[  378.357991][T25751]  __x64_sys_writev+0x45/0x50
[  378.362783][T25751]  x64_sys_call+0x1fab/0x2dc0
[  378.367523][T25751]  do_syscall_64+0xc9/0x1c0
[  378.372055][T25751]  ? clear_bhb_loop+0x55/0xb0
[  378.376753][T25751]  ? clear_bhb_loop+0x55/0xb0
[  378.381458][T25751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.387378][T25751] RIP: 0033:0x7f4cdde95d29
[  378.391886][T25751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.411570][T25751] RSP: 002b:00007f4cdc507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  378.420002][T25751] RAX: ffffffffffffffda RBX: 00007f4cde085fa0 RCX: 00007f4cdde95d29
[  378.427983][T25751] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003
[  378.435999][T25751] RBP: 00007f4cdc507090 R08: 0000000000000000 R09: 0000000000000000
[  378.444053][T25751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  378.452063][T25751] R13: 0000000000000000 R14: 00007f4cde085fa0 R15: 00007fff74fe1788
[  378.460060][T25751]  </TASK>
[  378.549929][T25755] siw: device registration error -23
[  378.726632][T25755] loop7: detected capacity change from 0 to 512
[  378.743017][T25755] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities
[  378.901875][T25763] FAULT_INJECTION: forcing a failure.
[  378.901875][T25763] name failslab, interval 1, probability 0, space 0, times 0
[  378.914863][T25763] CPU: 0 UID: 0 PID: 25763 Comm: syz.2.6821 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  378.925651][T25763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  378.935759][T25763] Call Trace:
[  378.939054][T25763]  <TASK>
[  378.942004][T25763]  dump_stack_lvl+0xf2/0x150
[  378.946637][T25763]  dump_stack+0x15/0x1a
[  378.950851][T25763]  should_fail_ex+0x223/0x230
[  378.955545][T25763]  should_failslab+0x8f/0xb0
[  378.960185][T25763]  kmem_cache_alloc_noprof+0x52/0x320
[  378.965576][T25763]  ? skb_clone+0x154/0x1f0
[  378.970017][T25763]  ? __pfx_stp_pdu_rcv+0x10/0x10
[  378.974993][T25763]  skb_clone+0x154/0x1f0
[  378.979254][T25763]  ? __pfx_llc_sap_handler+0x10/0x10
[  378.984578][T25763]  llc_rcv+0x47f/0x750
[  378.988680][T25763]  ? __pfx_ip_rcv+0x10/0x10
[  378.993222][T25763]  ? __pfx_llc_rcv+0x10/0x10
[  378.997835][T25763]  __netif_receive_skb+0x123/0x280
[  379.002969][T25763]  netif_receive_skb+0x4a/0x320
[  379.007923][T25763]  ? skb_header_pointer+0x52/0xa0
[  379.012981][T25763]  ? tun_rx_batched+0xba/0x410
[  379.017783][T25763]  tun_rx_batched+0xf0/0x410
[  379.022535][T25763]  tun_get_user+0x1f21/0x25c0
[  379.027268][T25763]  ? avc_has_perm+0xd4/0x160
[  379.031999][T25763]  ? ref_tracker_alloc+0x1f5/0x2f0
[  379.037152][T25763]  tun_chr_write_iter+0x188/0x240
[  379.042227][T25763]  vfs_write+0x77f/0x920
[  379.046555][T25763]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  379.052219][T25763]  ksys_write+0xe8/0x1b0
[  379.056557][T25763]  __x64_sys_write+0x42/0x50
[  379.061177][T25763]  x64_sys_call+0x287e/0x2dc0
[  379.065878][T25763]  do_syscall_64+0xc9/0x1c0
[  379.067480][T25761] loop3: detected capacity change from 0 to 128
[  379.070381][T25763]  ? clear_bhb_loop+0x55/0xb0
[  379.081330][T25763]  ? clear_bhb_loop+0x55/0xb0
[  379.086035][T25763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.091992][T25763] RIP: 0033:0x7f090d6947df
[  379.096433][T25763] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  379.116079][T25763] RSP: 002b:00007f090bd07000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  379.124534][T25763] RAX: ffffffffffffffda RBX: 00007f090d885fa0 RCX: 00007f090d6947df
[  379.132534][T25763] RDX: 000000000000001f RSI: 0000000020000180 RDI: 00000000000000c8
[  379.140516][T25763] RBP: 00007f090bd07090 R08: 0000000000000000 R09: 0000000000000000
[  379.148572][T25763] R10: 000000000000001f R11: 0000000000000293 R12: 0000000000000001
[  379.156784][T25763] R13: 0000000000000000 R14: 00007f090d885fa0 R15: 00007ffc99885a38
[  379.164771][T25763]  </TASK>
[  379.210059][T25765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6822'.
[  379.226057][T18195] kworker/u8:47: attempt to access beyond end of device
[  379.226057][T18195] loop3: rw=1, sector=145, nr_sectors = 896 limit=128
[  379.263891][T25771] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6824'.
[  379.420539][T25780] netem: change failed
[  379.447574][T25782] loop4: detected capacity change from 0 to 256
[  380.164573][T25816] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  380.172948][T25816] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  380.267336][T25830] loop0: detected capacity change from 0 to 256
[  380.340443][   T29] kauditd_printk_skb: 438 callbacks suppressed
[  380.340462][   T29] audit: type=1326 audit(380.365:48883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.4.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  380.346376][T25835] syz.4.6837[25835] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  380.346723][   T29] audit: type=1326 audit(380.365:48884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.4.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  380.404661][   T29] audit: type=1326 audit(380.365:48885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.4.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  380.427745][   T29] audit: type=1326 audit(380.365:48886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.4.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  380.437277][T25836] __nla_validate_parse: 1 callbacks suppressed
[  380.437297][T25836] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6837'.
[  380.451400][   T29] audit: type=1326 audit(380.365:48887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.4.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  380.489296][   T29] audit: type=1326 audit(380.365:48888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.4.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  380.493887][T25835] syz.4.6837[25835] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  380.512484][   T29] audit: type=1326 audit(380.365:48889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.4.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  380.534364][T25835] syz.4.6837[25835] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  380.547241][   T29] audit: type=1326 audit(380.365:48890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.4.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  380.547279][   T29] audit: type=1326 audit(380.365:48891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.4.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  380.547310][   T29] audit: type=1326 audit(380.365:48892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25834 comm="syz.4.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  380.629674][T25843] loop3: detected capacity change from 0 to 128
[  380.676024][T18191] kworker/u8:43: attempt to access beyond end of device
[  380.676024][T18191] loop3: rw=1, sector=145, nr_sectors = 896 limit=128
[  380.757806][T25863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6842'.
[  381.666444][T25889] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  381.674689][T25889] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  381.749195][T25899] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  381.757784][T25899] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  381.810628][T25900] loop4: detected capacity change from 0 to 1024
[  381.851352][T25900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.903972][T25900] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28
[  381.916394][T25900] EXT4-fs (loop4): This should not happen!! Data will be lost
[  381.916394][T25900] 
[  381.926122][T25900] EXT4-fs (loop4): Total free blocks count 0
[  381.932199][T25900] EXT4-fs (loop4): Free/Dirty block details
[  381.938146][T25900] EXT4-fs (loop4): free_blocks=0
[  381.943277][T25900] EXT4-fs (loop4): dirty_blocks=0
[  381.948509][T25900] EXT4-fs (loop4): Block reservation details
[  381.954697][T25900] EXT4-fs (loop4): i_reserved_data_blocks=0
[  382.033760][T25915] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6851'.
[  382.059224][T24212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.158132][T25930] loop7: detected capacity change from 0 to 128
[  382.210664][T25938] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6855'.
[  382.273101][T18191] kworker/u8:43: attempt to access beyond end of device
[  382.273101][T18191] loop7: rw=1, sector=145, nr_sectors = 896 limit=128
[  382.361898][T25943] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  382.368644][T25943] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  382.376267][T25943] vhci_hcd vhci_hcd.0: Device attached
[  382.415317][T25959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6860'.
[  382.455929][T25951] vhci_hcd: connection closed
[  382.459104][T18191] vhci_hcd: stop threads
[  382.468237][T18191] vhci_hcd: release socket
[  382.472711][T18191] vhci_hcd: disconnect device
[  382.517896][T25964] 9pnet_fd: Insufficient options for proto=fd
[  382.624901][T25974] loop3: detected capacity change from 0 to 1024
[  382.665361][T25974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.861807][T25974] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28
[  382.874174][T25974] EXT4-fs (loop3): This should not happen!! Data will be lost
[  382.874174][T25974] 
[  382.883866][T25974] EXT4-fs (loop3): Total free blocks count 0
[  382.890000][T25974] EXT4-fs (loop3): Free/Dirty block details
[  382.895992][T25974] EXT4-fs (loop3): free_blocks=0
[  382.901000][T25974] EXT4-fs (loop3): dirty_blocks=0
[  382.906047][T25974] EXT4-fs (loop3): Block reservation details
[  382.912052][T25974] EXT4-fs (loop3): i_reserved_data_blocks=0
[  383.022465][T25988] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6867'.
[  383.057641][T21603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.098089][T25999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6870'.
[  383.125945][T26003] loop3: detected capacity change from 0 to 512
[  383.166805][T26003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.255177][T21603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.276688][T26019] syz.4.6878: attempt to access beyond end of device
[  383.276688][T26019] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  383.323176][T26024] 9pnet_fd: Insufficient options for proto=fd
[  383.339807][T26019] loop4: detected capacity change from 0 to 512
[  383.382559][T26019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  383.392107][T26028] loop0: detected capacity change from 0 to 1024
[  383.426939][T26033] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6880'.
[  383.449804][T26019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.469043][T26028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  383.500971][T26028] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28
[  383.513395][T26028] EXT4-fs (loop0): This should not happen!! Data will be lost
[  383.513395][T26028] 
[  383.514473][T26047] loop3: detected capacity change from 0 to 512
[  383.523079][T26028] EXT4-fs (loop0): Total free blocks count 0
[  383.535563][T26028] EXT4-fs (loop0): Free/Dirty block details
[  383.541492][T26028] EXT4-fs (loop0): free_blocks=0
[  383.543290][T26047] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  383.546524][T26028] EXT4-fs (loop0): dirty_blocks=0
[  383.561517][T26028] EXT4-fs (loop0): Block reservation details
[  383.567555][T26028] EXT4-fs (loop0): i_reserved_data_blocks=0
[  383.573473][T26047] EXT4-fs (loop3): 1 truncate cleaned up
[  383.579665][T26047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  383.616197][T26019] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  383.717032][T26067] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6888'.
[  383.728321][T24760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.733184][T21603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.787782][T26074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6887'.
[  383.797421][T24212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.809356][T26076] tmpfs: Unknown parameter 'fsmagic'
[  383.818535][T26076] loop0: detected capacity change from 0 to 512
[  383.832049][T26076] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  384.010143][T26076] EXT4-fs (loop0): 1 truncate cleaned up
[  384.019787][T26076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.060132][T26085] 9pnet_fd: Insufficient options for proto=fd
[  384.191138][T24760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.285609][T26091] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  384.293934][T26091] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  384.336644][T26099] loop3: detected capacity change from 0 to 1024
[  384.372469][T26104] syz.4.6899[26104] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  384.372576][T26104] syz.4.6899[26104] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  384.384419][T26104] syz.4.6899[26104] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  384.408144][T26099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.446871][T26099] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28
[  384.459220][T26099] EXT4-fs (loop3): This should not happen!! Data will be lost
[  384.459220][T26099] 
[  384.468930][T26099] EXT4-fs (loop3): Total free blocks count 0
[  384.475041][T26099] EXT4-fs (loop3): Free/Dirty block details
[  384.480949][T26099] EXT4-fs (loop3): free_blocks=0
[  384.486015][T26099] EXT4-fs (loop3): dirty_blocks=0
[  384.488451][T26111] loop0: detected capacity change from 0 to 128
[  384.491111][T26099] EXT4-fs (loop3): Block reservation details
[  384.491128][T26099] EXT4-fs (loop3): i_reserved_data_blocks=0
[  384.541003][T18192] kworker/u8:44: attempt to access beyond end of device
[  384.541003][T18192] loop0: rw=1, sector=145, nr_sectors = 896 limit=128
[  384.603932][T21603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.692396][T26128] FAULT_INJECTION: forcing a failure.
[  384.692396][T26128] name failslab, interval 1, probability 0, space 0, times 0
[  384.698223][T26125] bond1: entered promiscuous mode
[  384.705104][T26128] CPU: 1 UID: 0 PID: 26128 Comm: syz.2.6908 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  384.705139][T26128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  384.710170][T26125] bond1: entered allmulticast mode
[  384.710455][T26125] 8021q: adding VLAN 0 to HW filter on device bond1
[  384.720918][T26128] Call Trace:
[  384.720929][T26128]  <TASK>
[  384.720940][T26128]  dump_stack_lvl+0xf2/0x150
[  384.753507][T26128]  dump_stack+0x15/0x1a
[  384.757838][T26128]  should_fail_ex+0x223/0x230
[  384.762547][T26128]  should_failslab+0x8f/0xb0
[  384.767174][T26128]  kmem_cache_alloc_node_noprof+0x59/0x320
[  384.773009][T26128]  ? __alloc_skb+0x10b/0x310
[  384.777641][T26128]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  384.783506][T26128]  __alloc_skb+0x10b/0x310
[  384.788022][T26128]  tipc_buf_acquire+0x2c/0xb0
[  384.792775][T26128]  tipc_named_withdraw+0x144/0x360
[  384.797909][T26128]  tipc_nametbl_withdraw+0x105/0x1f0
[  384.803234][T26128]  tipc_release+0x16a/0xa70
[  384.807856][T26128]  sock_close+0x68/0x150
[  384.812163][T26128]  ? __pfx_sock_close+0x10/0x10
[  384.817101][T26128]  __fput+0x17a/0x6d0
[  384.821105][T26128]  ____fput+0x1c/0x30
[  384.825174][T26128]  task_work_run+0x13a/0x1a0
[  384.829797][T26128]  syscall_exit_to_user_mode+0xa8/0x120
[  384.835453][T26128]  do_syscall_64+0xd6/0x1c0
[  384.839979][T26128]  ? clear_bhb_loop+0x55/0xb0
[  384.844760][T26128]  ? clear_bhb_loop+0x55/0xb0
[  384.849452][T26128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.855432][T26128] RIP: 0033:0x7f090d695d29
[  384.859917][T26128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  384.879558][T26128] RSP: 002b:00007f090bd07038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  384.888012][T26128] RAX: 0000000000000000 RBX: 00007f090d885fa0 RCX: 00007f090d695d29
[  384.896105][T26128] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005
[  384.904108][T26128] RBP: 00007f090bd07090 R08: 0000000000000000 R09: 0000000000000000
[  384.912093][T26128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  384.920086][T26128] R13: 0000000000000000 R14: 00007f090d885fa0 R15: 00007ffc99885a38
[  384.928098][T26128]  </TASK>
[  384.931241][T26128] tipc: Withdrawal distribution failure
[  384.956527][T26125] bond1 (unregistering): Released all slaves
[  385.068292][T26136] loop4: detected capacity change from 0 to 1024
[  385.070340][T26136] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  385.070370][T26136] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  385.072643][T26136] JBD2: no valid journal superblock found
[  385.072658][T26136] EXT4-fs (loop4): Could not load journal inode
[  385.151475][T26139] loop3: detected capacity change from 0 to 512
[  385.242667][T26139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.358172][T26148] FAULT_INJECTION: forcing a failure.
[  385.358172][T26148] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  385.371379][T26148] CPU: 1 UID: 0 PID: 26148 Comm: syz.0.6914 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  385.382186][T26148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  385.392318][T26148] Call Trace:
[  385.395671][T26148]  <TASK>
[  385.398635][T26148]  dump_stack_lvl+0xf2/0x150
[  385.403348][T26148]  dump_stack+0x15/0x1a
[  385.407587][T26148]  should_fail_ex+0x223/0x230
[  385.412353][T26148]  should_fail+0xb/0x10
[  385.416535][T26148]  should_fail_usercopy+0x1a/0x20
[  385.421645][T26148]  _copy_from_user+0x1e/0xb0
[  385.426312][T26148]  copy_msghdr_from_user+0x54/0x2a0
[  385.431597][T26148]  ? __fget_files+0x17c/0x1c0
[  385.436352][T26148]  __sys_sendmsg+0x13e/0x230
[  385.441023][T26148]  __x64_sys_sendmsg+0x46/0x50
[  385.445898][T26148]  x64_sys_call+0x2734/0x2dc0
[  385.450720][T26148]  do_syscall_64+0xc9/0x1c0
[  385.455230][T26148]  ? clear_bhb_loop+0x55/0xb0
[  385.459928][T26148]  ? clear_bhb_loop+0x55/0xb0
[  385.464636][T26148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.470563][T26148] RIP: 0033:0x7f9994075d29
[  385.475007][T26148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  385.494690][T26148] RSP: 002b:00007f99926e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  385.503191][T26148] RAX: ffffffffffffffda RBX: 00007f9994265fa0 RCX: 00007f9994075d29
[  385.511189][T26148] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000009
[  385.519257][T26148] RBP: 00007f99926e1090 R08: 0000000000000000 R09: 0000000000000000
[  385.527342][T26148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  385.535413][T26148] R13: 0000000000000000 R14: 00007f9994265fa0 R15: 00007ffcd1e1da98
[  385.543451][T26148]  </TASK>
[  385.557443][   T29] kauditd_printk_skb: 761 callbacks suppressed
[  385.557459][   T29] audit: type=1400 audit(385.585:49654): avc:  denied  { read } for  pid=26147 comm="syz.0.6914" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  385.617416][T21603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.635735][   T29] audit: type=1400 audit(385.585:49655): avc:  denied  { open } for  pid=26147 comm="syz.0.6914" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  386.323194][T26202] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  386.331582][T26202] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  386.503318][T26218] loop7: detected capacity change from 0 to 1024
[  386.540000][T26218] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  386.550978][T26218] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  386.590463][T26218] JBD2: no valid journal superblock found
[  386.596333][T26218] EXT4-fs (loop7): Could not load journal inode
[  386.662158][   T29] audit: type=1326 audit(386.685:49656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26223 comm="syz.4.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  386.685327][   T29] audit: type=1326 audit(386.685:49657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26223 comm="syz.4.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  386.708428][   T29] audit: type=1326 audit(386.685:49658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26223 comm="syz.4.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  386.717621][T26250] 9pnet_fd: Insufficient options for proto=fd
[  386.731611][   T29] audit: type=1326 audit(386.685:49659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26223 comm="syz.4.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  386.760883][   T29] audit: type=1326 audit(386.685:49660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26223 comm="syz.4.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f51c97d47df code=0x7ffc0000
[  386.783805][   T29] audit: type=1326 audit(386.685:49661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26223 comm="syz.4.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  386.806785][   T29] audit: type=1326 audit(386.685:49662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26223 comm="syz.4.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  386.829880][   T29] audit: type=1326 audit(386.685:49663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26223 comm="syz.4.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  387.033735][T26287] 9pnet_fd: Insufficient options for proto=fd
[  387.047315][T26281] __nla_validate_parse: 3 callbacks suppressed
[  387.047334][T26281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6930'.
[  387.058274][T26291] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6933'.
[  387.172618][T26303] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6937'.
[  387.182675][T26303] netlink: 'syz.3.6937': attribute type 4 has an invalid length.
[  387.205170][T26303] 9pnet_fd: Insufficient options for proto=fd
[  387.367233][T26306] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  387.375619][T26306] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  387.438541][T26310] loop3: detected capacity change from 0 to 512
[  387.481928][T26310] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  387.523841][T26310] EXT4-fs (loop3): orphan cleanup on readonly fs
[  387.556997][T26310] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  387.581402][T26310] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  387.591496][T26310] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.6939: iget: immutable or append flags not allowed on symlinks
[  387.609991][T26310] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.6939: couldn't read orphan inode 16 (err -117)
[  387.635371][T26313] 9pnet_fd: Insufficient options for proto=fd
[  387.635709][T26310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  387.657145][T26310] syz.3.6939[26310] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  387.657221][T26310] syz.3.6939[26310] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  387.669134][T26310] syz.3.6939[26310] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  387.685791][T26310] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  387.732480][T21603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.796610][T26324] loop0: detected capacity change from 0 to 256
[  388.015718][T26344] 9pnet_fd: Insufficient options for proto=fd
[  388.151208][T26357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6957'.
[  388.163984][T26363] FAULT_INJECTION: forcing a failure.
[  388.163984][T26363] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  388.177154][T26363] CPU: 1 UID: 0 PID: 26363 Comm: syz.7.6959 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  388.188006][T26363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  388.198094][T26363] Call Trace:
[  388.201444][T26363]  <TASK>
[  388.204386][T26363]  dump_stack_lvl+0xf2/0x150
[  388.208991][T26363]  dump_stack+0x15/0x1a
[  388.213162][T26363]  should_fail_ex+0x223/0x230
[  388.217846][T26363]  should_fail+0xb/0x10
[  388.222189][T26363]  should_fail_usercopy+0x1a/0x20
[  388.227221][T26363]  _copy_from_iter+0xd5/0xd00
[  388.231926][T26363]  ? kstrtouint+0x77/0xc0
[  388.236264][T26363]  ? should_fail_ex+0xd7/0x230
[  388.241051][T26363]  ? should_failslab+0x8f/0xb0
[  388.245876][T26363]  ? __virt_addr_valid+0x1ed/0x250
[  388.251012][T26363]  ? __check_object_size+0x364/0x520
[  388.256398][T26363]  kernfs_fop_write_iter+0x131/0x2c0
[  388.261760][T26363]  vfs_write+0x77f/0x920
[  388.266039][T26363]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  388.271885][T26363]  ksys_write+0xe8/0x1b0
[  388.276201][T26363]  __x64_sys_write+0x42/0x50
[  388.280886][T26363]  x64_sys_call+0x287e/0x2dc0
[  388.285576][T26363]  do_syscall_64+0xc9/0x1c0
[  388.290110][T26363]  ? clear_bhb_loop+0x55/0xb0
[  388.294995][T26363]  ? clear_bhb_loop+0x55/0xb0
[  388.299779][T26363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.305737][T26363] RIP: 0033:0x7f4cdde95d29
[  388.310189][T26363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  388.329828][T26363] RSP: 002b:00007f4cdc507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  388.338341][T26363] RAX: ffffffffffffffda RBX: 00007f4cde085fa0 RCX: 00007f4cdde95d29
[  388.346456][T26363] RDX: 0000000000000012 RSI: 0000000020000000 RDI: 0000000000000006
[  388.354431][T26363] RBP: 00007f4cdc507090 R08: 0000000000000000 R09: 0000000000000000
[  388.362405][T26363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  388.370397][T26363] R13: 0000000000000000 R14: 00007f4cde085fa0 R15: 00007fff74fe1788
[  388.378506][T26363]  </TASK>
[  388.423114][T26369] netlink: 'syz.7.6962': attribute type 1 has an invalid length.
[  388.571534][T26376] atomic_op ffff88814a36d528 conn xmit_atomic 0000000000000000
[  389.057370][T26396] loop7: detected capacity change from 0 to 128
[  389.129101][T26401] loop3: detected capacity change from 0 to 256
[  389.180638][T18179] kworker/u8:35: attempt to access beyond end of device
[  389.180638][T18179] loop7: rw=1, sector=145, nr_sectors = 896 limit=128
[  389.210385][T26407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6976'.
[  389.330775][T26417] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6980'.
[  389.652733][T26451] loop4: detected capacity change from 0 to 128
[  389.709624][T18193] kworker/u8:45: attempt to access beyond end of device
[  389.709624][T18193] loop4: rw=1, sector=145, nr_sectors = 896 limit=128
[  389.781751][T26455] erspan1: entered promiscuous mode
[  389.873038][T26465] loop4: detected capacity change from 0 to 164
[  390.022866][T26481] 9pnet_fd: Insufficient options for proto=fd
[  390.098999][T26479] loop3: detected capacity change from 0 to 8192
[  390.116535][T26479] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  390.148211][T26489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7007'.
[  390.148717][T26479] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  390.165802][T26479] FAT-fs (loop3): Filesystem has been set read-only
[  390.345452][T26491] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  390.353659][T26491] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  390.504266][T26506] loop0: detected capacity change from 0 to 1024
[  390.545637][T26506] EXT4-fs: Ignoring removed orlov option
[  390.551377][T26506] EXT4-fs: Ignoring removed nomblk_io_submit option
[  390.594110][T26506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  390.712563][   T29] kauditd_printk_skb: 721 callbacks suppressed
[  390.712581][   T29] audit: type=1400 audit(390.735:50384): avc:  denied  { execute } for  pid=26505 comm="syz.0.7015" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  390.755028][   T29] audit: type=1400 audit(390.735:50385): avc:  denied  { execute_no_trans } for  pid=26505 comm="syz.0.7015" path="/83/file1/file0/file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  390.828113][T26525] loop4: detected capacity change from 0 to 512
[  390.949352][T26525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.985911][T26528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7018'.
[  391.020534][T26540] loop7: detected capacity change from 0 to 1024
[  391.083871][T24212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.101133][T26540] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  391.209264][   T29] audit: type=1326 audit(391.235:50386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26545 comm="syz.4.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  391.253451][T26546] 9pnet_fd: Insufficient options for proto=fd
[  391.272307][T26540] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28
[  391.284876][T26540] EXT4-fs (loop7): This should not happen!! Data will be lost
[  391.284876][T26540] 
[  391.294561][T26540] EXT4-fs (loop7): Total free blocks count 0
[  391.300679][T26540] EXT4-fs (loop7): Free/Dirty block details
[  391.306619][T26540] EXT4-fs (loop7): free_blocks=0
[  391.311612][T26540] EXT4-fs (loop7): dirty_blocks=0
[  391.316872][T26540] EXT4-fs (loop7): Block reservation details
[  391.322919][T26540] EXT4-fs (loop7): i_reserved_data_blocks=0
[  391.445294][   T29] audit: type=1326 audit(391.275:50387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26545 comm="syz.4.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  391.468231][   T29] audit: type=1326 audit(391.275:50388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26545 comm="syz.4.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  391.491660][   T29] audit: type=1326 audit(391.275:50389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26545 comm="syz.4.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  391.514559][   T29] audit: type=1326 audit(391.275:50390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26545 comm="syz.4.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  391.537536][   T29] audit: type=1326 audit(391.275:50391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26545 comm="syz.4.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  391.560735][   T29] audit: type=1326 audit(391.275:50392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26545 comm="syz.4.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  391.583775][   T29] audit: type=1326 audit(391.275:50393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26545 comm="syz.4.7025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  391.624777][T24760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.672731][T22802] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.730231][T26556] xt_hashlimit: max too large, truncated to 1048576
[  391.755240][T26556] Cannot find set identified by id 0 to match
[  391.766780][T26558] loop4: detected capacity change from 0 to 1024
[  391.773934][T26558] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  391.784885][T26558] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  391.787737][T26556] loop7: detected capacity change from 0 to 256
[  391.801862][T26558] JBD2: no valid journal superblock found
[  391.807717][T26558] EXT4-fs (loop4): Could not load journal inode
[  391.818781][T26558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7030'.
[  391.852790][T26558] geneve0: entered allmulticast mode
[  391.910011][T26556] loop7: detected capacity change from 0 to 512
[  391.928789][T26568] loop3: detected capacity change from 0 to 512
[  391.936663][T26556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.973461][T26574] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  391.981727][T26574] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  392.006893][T26568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.064451][T21603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.099458][T22802] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.235852][T26594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7043'.
[  392.376250][T26613] loop3: detected capacity change from 0 to 512
[  392.421240][T26613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.480563][T21603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.520348][T26618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7050'.
[  392.720836][T26626] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7054'.
[  392.793791][T26627] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  392.802225][T26627] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  392.870912][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7057'.
[  393.007348][T26648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7061'.
[  393.106252][T26646] FAULT_INJECTION: forcing a failure.
[  393.106252][T26646] name failslab, interval 1, probability 0, space 0, times 0
[  393.119019][T26646] CPU: 1 UID: 0 PID: 26646 Comm: syz.7.7060 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  393.129898][T26646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  393.139979][T26646] Call Trace:
[  393.143273][T26646]  <TASK>
[  393.146228][T26646]  dump_stack_lvl+0xf2/0x150
[  393.150904][T26646]  dump_stack+0x15/0x1a
[  393.155104][T26646]  should_fail_ex+0x223/0x230
[  393.159892][T26646]  should_failslab+0x8f/0xb0
[  393.164508][T26646]  kmem_cache_alloc_node_noprof+0x59/0x320
[  393.170386][T26646]  ? __alloc_skb+0x10b/0x310
[  393.175007][T26646]  __alloc_skb+0x10b/0x310
[  393.179580][T26646]  sock_wmalloc+0x7b/0xc0
[  393.183957][T26646]  pppol2tp_sendmsg+0xff/0x440
[  393.188746][T26646]  ? __pfx_pppol2tp_sendmsg+0x10/0x10
[  393.194146][T26646]  __sock_sendmsg+0x140/0x180
[  393.198878][T26646]  sock_write_iter+0x15e/0x1a0
[  393.203672][T26646]  do_iter_readv_writev+0x394/0x450
[  393.209094][T26646]  vfs_writev+0x2d4/0x880
[  393.213512][T26646]  ? proc_fail_nth_write+0x12a/0x150
[  393.218915][T26646]  do_writev+0xf4/0x220
[  393.223158][T26646]  __x64_sys_writev+0x45/0x50
[  393.227858][T26646]  x64_sys_call+0x1fab/0x2dc0
[  393.232554][T26646]  do_syscall_64+0xc9/0x1c0
[  393.237075][T26646]  ? clear_bhb_loop+0x55/0xb0
[  393.241778][T26646]  ? clear_bhb_loop+0x55/0xb0
[  393.246561][T26646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.252596][T26646] RIP: 0033:0x7f4cdde95d29
[  393.257064][T26646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  393.276791][T26646] RSP: 002b:00007f4cdc507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  393.285249][T26646] RAX: ffffffffffffffda RBX: 00007f4cde085fa0 RCX: 00007f4cdde95d29
[  393.293244][T26646] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000005
[  393.301221][T26646] RBP: 00007f4cdc507090 R08: 0000000000000000 R09: 0000000000000000
[  393.309229][T26646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  393.317204][T26646] R13: 0000000000000000 R14: 00007f4cde085fa0 R15: 00007fff74fe1788
[  393.325192][T26646]  </TASK>
[  393.575683][T26659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7065'.
[  393.576047][T26663] loop7: detected capacity change from 0 to 256
[  393.942494][T26693] loop4: detected capacity change from 0 to 512
[  393.950297][T26694] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  393.958578][T26694] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  394.001959][T26693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.034434][T24212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.052299][T26701] FAULT_INJECTION: forcing a failure.
[  394.052299][T26701] name failslab, interval 1, probability 0, space 0, times 0
[  394.065288][T26701] CPU: 0 UID: 0 PID: 26701 Comm: syz.2.7080 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  394.076071][T26701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  394.086237][T26701] Call Trace:
[  394.089528][T26701]  <TASK>
[  394.092546][T26701]  dump_stack_lvl+0xf2/0x150
[  394.097176][T26701]  dump_stack+0x15/0x1a
[  394.101365][T26701]  should_fail_ex+0x223/0x230
[  394.106124][T26701]  should_failslab+0x8f/0xb0
[  394.110751][T26701]  kmem_cache_alloc_node_noprof+0x59/0x320
[  394.116625][T26701]  ? __alloc_skb+0x10b/0x310
[  394.121347][T26701]  __alloc_skb+0x10b/0x310
[  394.125793][T26701]  alloc_skb_with_frags+0x80/0x450
[  394.130999][T26701]  ? fib6_rule_lookup+0x265/0x4e0
[  394.136120][T26701]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  394.141875][T26701]  ? page_counter_charge+0x21a/0x240
[  394.147180][T26701]  sock_alloc_send_pskb+0x435/0x4f0
[  394.152563][T26701]  ? xfrm_lookup_with_ifid+0xbd6/0x12f0
[  394.158126][T26701]  rawv6_send_hdrinc+0x16c/0xb10
[  394.163102][T26701]  ? xfrm_lookup_route+0xcf/0x110
[  394.168160][T26701]  rawv6_sendmsg+0xde3/0xf50
[  394.172860][T26701]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  394.177991][T26701]  inet_sendmsg+0xc5/0xd0
[  394.182342][T26701]  __sock_sendmsg+0x102/0x180
[  394.187117][T26701]  sock_write_iter+0x15e/0x1a0
[  394.191982][T26701]  vfs_write+0x77f/0x920
[  394.196247][T26701]  ? __pfx_sock_write_iter+0x10/0x10
[  394.201552][T26701]  ksys_write+0xe8/0x1b0
[  394.205816][T26701]  __x64_sys_write+0x42/0x50
[  394.210518][T26701]  x64_sys_call+0x287e/0x2dc0
[  394.215204][T26701]  do_syscall_64+0xc9/0x1c0
[  394.219720][T26701]  ? clear_bhb_loop+0x55/0xb0
[  394.224405][T26701]  ? clear_bhb_loop+0x55/0xb0
[  394.229092][T26701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.235037][T26701] RIP: 0033:0x7f090d695d29
[  394.239471][T26701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  394.259091][T26701] RSP: 002b:00007f090bd07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  394.267512][T26701] RAX: ffffffffffffffda RBX: 00007f090d885fa0 RCX: 00007f090d695d29
[  394.275491][T26701] RDX: 0000000000000043 RSI: 00000000200000c0 RDI: 0000000000000003
[  394.283467][T26701] RBP: 00007f090bd07090 R08: 0000000000000000 R09: 0000000000000000
[  394.291445][T26701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  394.299489][T26701] R13: 0000000000000000 R14: 00007f090d885fa0 R15: 00007ffc99885a38
[  394.307482][T26701]  </TASK>
[  394.477585][T26719] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7088'.
[  394.478520][T26717] macvtap0: entered promiscuous mode
[  394.496426][T26717] macvtap0: left promiscuous mode
[  394.555517][T26723] FAULT_INJECTION: forcing a failure.
[  394.555517][T26723] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  394.568750][T26723] CPU: 1 UID: 0 PID: 26723 Comm: syz.2.7090 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  394.579538][T26723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  394.589831][T26723] Call Trace:
[  394.593142][T26723]  <TASK>
[  394.596084][T26723]  dump_stack_lvl+0xf2/0x150
[  394.600777][T26723]  dump_stack+0x15/0x1a
[  394.604974][T26723]  should_fail_ex+0x223/0x230
[  394.609760][T26723]  should_fail+0xb/0x10
[  394.613937][T26723]  should_fail_usercopy+0x1a/0x20
[  394.619017][T26723]  _copy_from_user+0x1e/0xb0
[  394.623653][T26723]  copy_msghdr_from_user+0x54/0x2a0
[  394.628890][T26723]  ? __fget_files+0x17c/0x1c0
[  394.633624][T26723]  __sys_sendmsg+0x13e/0x230
[  394.638360][T26723]  __x64_sys_sendmsg+0x46/0x50
[  394.643175][T26723]  x64_sys_call+0x2734/0x2dc0
[  394.647936][T26723]  do_syscall_64+0xc9/0x1c0
[  394.652525][T26723]  ? clear_bhb_loop+0x55/0xb0
[  394.657322][T26723]  ? clear_bhb_loop+0x55/0xb0
[  394.662027][T26723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.668041][T26723] RIP: 0033:0x7f090d695d29
[  394.672475][T26723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  394.692332][T26723] RSP: 002b:00007f090bd07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  394.701152][T26723] RAX: ffffffffffffffda RBX: 00007f090d885fa0 RCX: 00007f090d695d29
[  394.709152][T26723] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[  394.717143][T26723] RBP: 00007f090bd07090 R08: 0000000000000000 R09: 0000000000000000
[  394.725297][T26723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  394.733284][T26723] R13: 0000000000000000 R14: 00007f090d885fa0 R15: 00007ffc99885a38
[  394.741276][T26723]  </TASK>
[  394.782648][T26727] FAULT_INJECTION: forcing a failure.
[  394.782648][T26727] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  394.795903][T26727] CPU: 1 UID: 0 PID: 26727 Comm: syz.2.7092 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  394.806689][T26727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  394.816856][T26727] Call Trace:
[  394.820150][T26727]  <TASK>
[  394.823116][T26727]  dump_stack_lvl+0xf2/0x150
[  394.827808][T26727]  dump_stack+0x15/0x1a
[  394.831995][T26727]  should_fail_ex+0x223/0x230
[  394.836686][T26727]  should_fail+0xb/0x10
[  394.840864][T26727]  should_fail_usercopy+0x1a/0x20
[  394.846034][T26727]  _copy_from_user+0x1e/0xb0
[  394.850673][T26727]  ucma_write+0xd4/0x240
[  394.854966][T26727]  ? __pfx_ucma_write+0x10/0x10
[  394.859862][T26727]  vfs_write+0x281/0x920
[  394.864137][T26727]  ? putname+0xcf/0xf0
[  394.868328][T26727]  ? __fget_files+0x17c/0x1c0
[  394.873159][T26727]  ksys_write+0xe8/0x1b0
[  394.877439][T26727]  __x64_sys_write+0x42/0x50
[  394.882141][T26727]  x64_sys_call+0x287e/0x2dc0
[  394.886894][T26727]  do_syscall_64+0xc9/0x1c0
[  394.891493][T26727]  ? clear_bhb_loop+0x55/0xb0
[  394.896238][T26727]  ? clear_bhb_loop+0x55/0xb0
[  394.901013][T26727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.906945][T26727] RIP: 0033:0x7f090d695d29
[  394.911496][T26727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  394.931131][T26727] RSP: 002b:00007f090bd07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  394.939622][T26727] RAX: ffffffffffffffda RBX: 00007f090d885fa0 RCX: 00007f090d695d29
[  394.947636][T26727] RDX: 0000000000000048 RSI: 0000000020000200 RDI: 0000000000000005
[  394.955666][T26727] RBP: 00007f090bd07090 R08: 0000000000000000 R09: 0000000000000000
[  394.963681][T26727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  394.971679][T26727] R13: 0000000000000000 R14: 00007f090d885fa0 R15: 00007ffc99885a38
[  394.979746][T26727]  </TASK>
[  395.031346][T26733] loop0: detected capacity change from 0 to 1024
[  395.039772][T26736] loop3: detected capacity change from 0 to 256
[  395.058291][T26739] program syz.7.7093 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  395.077174][T26732] loop7: detected capacity change from 0 to 512
[  395.084052][T26732] EXT4-fs: Ignoring removed orlov option
[  395.091888][T26732] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  395.108327][T26733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  395.133536][T26733] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28
[  395.145959][T26733] EXT4-fs (loop0): This should not happen!! Data will be lost
[  395.145959][T26733] 
[  395.155914][T26733] EXT4-fs (loop0): Total free blocks count 0
[  395.161918][T26733] EXT4-fs (loop0): Free/Dirty block details
[  395.167996][T26733] EXT4-fs (loop0): free_blocks=0
[  395.173018][T26733] EXT4-fs (loop0): dirty_blocks=0
[  395.178062][T26733] EXT4-fs (loop0): Block reservation details
[  395.184056][T26733] EXT4-fs (loop0): i_reserved_data_blocks=0
[  395.194153][T26732] EXT4-fs (loop7): orphan cleanup on readonly fs
[  395.209622][T26732] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7093: bg 0: block 248: padding at end of block bitmap is not set
[  395.235322][T26732] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.7093: Failed to acquire dquot type 1
[  395.251280][T26732] EXT4-fs (loop7): 1 truncate cleaned up
[  395.258621][T26732] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  395.274540][T26732] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.288371][T24760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.374087][T26755] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7099'.
[  395.388159][T26757] 9pnet_fd: Insufficient options for proto=fd
[  395.505792][T26766] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  395.660480][T26774] loop7: detected capacity change from 0 to 1024
[  395.692823][T26774] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  395.732548][T26774] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28
[  395.744930][T26774] EXT4-fs (loop7): This should not happen!! Data will be lost
[  395.744930][T26774] 
[  395.754749][T26774] EXT4-fs (loop7): Total free blocks count 0
[  395.760838][T26774] EXT4-fs (loop7): Free/Dirty block details
[  395.766881][T26774] EXT4-fs (loop7): free_blocks=0
[  395.771894][T26774] EXT4-fs (loop7): dirty_blocks=0
[  395.777033][T26774] EXT4-fs (loop7): Block reservation details
[  395.783046][T26774] EXT4-fs (loop7): i_reserved_data_blocks=0
[  395.790584][T26790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7113'.
[  395.824937][   T29] kauditd_printk_skb: 471 callbacks suppressed
[  395.824955][   T29] audit: type=1326 audit(395.845:50863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.2.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090d695d29 code=0x7ffc0000
[  395.871274][T22802] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.905110][   T29] audit: type=1326 audit(395.885:50864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.2.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f090d695d29 code=0x7ffc0000
[  395.928177][   T29] audit: type=1326 audit(395.885:50865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.2.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090d695d29 code=0x7ffc0000
[  395.951398][   T29] audit: type=1326 audit(395.905:50866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.2.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f090d695d29 code=0x7ffc0000
[  395.974459][   T29] audit: type=1326 audit(395.905:50867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.2.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090d695d29 code=0x7ffc0000
[  395.997541][   T29] audit: type=1326 audit(395.905:50868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.2.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090d695d29 code=0x7ffc0000
[  396.020606][   T29] audit: type=1326 audit(395.905:50869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.2.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f090d695d29 code=0x7ffc0000
[  396.043715][   T29] audit: type=1326 audit(395.905:50870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.2.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090d695d29 code=0x7ffc0000
[  396.066748][   T29] audit: type=1326 audit(395.905:50871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.2.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f090d695d29 code=0x7ffc0000
[  396.089667][   T29] audit: type=1326 audit(395.905:50872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.2.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090d695d29 code=0x7ffc0000
[  396.136577][T26805] 9pnet_fd: Insufficient options for proto=fd
[  396.186703][T26808] loop3: detected capacity change from 0 to 512
[  396.202364][T26810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7122'.
[  396.211342][T26810] netlink: 'syz.4.7122': attribute type 11 has an invalid length.
[  396.232886][T26808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.311822][T21603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.413885][T26825] smc: net device bond0 applied user defined pnetid SYZ0
[  396.435559][T26825] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0
[  396.444561][T26825] smc: net device bond0 erased user defined pnetid SYZ0
[  396.451945][T26825] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0
[  396.460869][T26825] netlink: 'syz.4.7126': attribute type 13 has an invalid length.
[  396.487064][T26825] gretap0: refused to change device tx_queue_len
[  396.522732][T26825] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  396.604861][T26833] loop3: detected capacity change from 0 to 256
[  396.651709][T26834] loop0: detected capacity change from 0 to 1024
[  396.668895][T26836] 8021q: adding VLAN 0 to HW filter on device batadv2
[  396.706800][T26834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  396.744193][T26846] FAULT_INJECTION: forcing a failure.
[  396.744193][T26846] name failslab, interval 1, probability 0, space 0, times 0
[  396.756945][T26846] CPU: 1 UID: 0 PID: 26846 Comm: syz.2.7133 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  396.767859][T26846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  396.777976][T26846] Call Trace:
[  396.781264][T26846]  <TASK>
[  396.784210][T26846]  dump_stack_lvl+0xf2/0x150
[  396.788934][T26846]  dump_stack+0x15/0x1a
[  396.793152][T26846]  should_fail_ex+0x223/0x230
[  396.797844][T26846]  should_failslab+0x8f/0xb0
[  396.802553][T26846]  kmem_cache_alloc_noprof+0x52/0x320
[  396.808000][T26846]  ? _sctp_make_chunk+0xba/0x210
[  396.812976][T26846]  _sctp_make_chunk+0xba/0x210
[  396.817766][T26846]  sctp_make_abort_user+0x3f/0x500
[  396.822917][T26846]  sctp_sendmsg_check_sflags+0x17c/0x1d0
[  396.828581][T26846]  sctp_sendmsg+0x754/0x1920
[  396.833254][T26846]  ? __pfx_sctp_sendmsg+0x10/0x10
[  396.838327][T26846]  inet_sendmsg+0xc5/0xd0
[  396.842892][T26846]  __sock_sendmsg+0x102/0x180
[  396.847631][T26846]  ____sys_sendmsg+0x312/0x410
[  396.852416][T26846]  __sys_sendmmsg+0x227/0x4b0
[  396.857177][T26846]  __x64_sys_sendmmsg+0x57/0x70
[  396.862111][T26846]  x64_sys_call+0x29aa/0x2dc0
[  396.866887][T26846]  do_syscall_64+0xc9/0x1c0
[  396.871419][T26846]  ? clear_bhb_loop+0x55/0xb0
[  396.876109][T26846]  ? clear_bhb_loop+0x55/0xb0
[  396.880852][T26846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.886772][T26846] RIP: 0033:0x7f090d695d29
[  396.891263][T26846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  396.910950][T26846] RSP: 002b:00007f090bd07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  396.919460][T26846] RAX: ffffffffffffffda RBX: 00007f090d885fa0 RCX: 00007f090d695d29
[  396.927531][T26846] RDX: 0000000000000001 RSI: 00000000200032c0 RDI: 0000000000000003
[  396.935526][T26846] RBP: 00007f090bd07090 R08: 0000000000000000 R09: 0000000000000000
[  396.936029][T26834] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28
[  396.943554][T26846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  396.943573][T26846] R13: 0000000000000000 R14: 00007f090d885fa0 R15: 00007ffc99885a38
[  396.955837][T26834] EXT4-fs (loop0): This should not happen!! Data will be lost
[  396.955837][T26834] 
[  396.963761][T26846]  </TASK>
[  396.971891][T26834] EXT4-fs (loop0): Total free blocks count 0
[  396.990783][T26834] EXT4-fs (loop0): Free/Dirty block details
[  396.996728][T26834] EXT4-fs (loop0): free_blocks=0
[  397.001767][T26834] EXT4-fs (loop0): dirty_blocks=0
[  397.006854][T26834] EXT4-fs (loop0): Block reservation details
[  397.012864][T26834] EXT4-fs (loop0): i_reserved_data_blocks=0
[  397.053458][T24760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.134473][T26859] loop0: detected capacity change from 0 to 512
[  397.161825][T26859] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.7139: corrupted in-inode xattr: invalid ea_ino
[  397.180220][T26859] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.7139: couldn't read orphan inode 15 (err -117)
[  397.192852][T26859] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  397.261977][T24760] EXT4-fs (loop0): unmounting filesystem 00000007-0000-0000-0000-000000000000.
[  397.360226][T26869] __nla_validate_parse: 3 callbacks suppressed
[  397.360262][T26869] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7142'.
[  397.400798][T26872] loop7: detected capacity change from 0 to 512
[  397.422939][T26872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.559460][T26886] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  397.566108][T26886] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  397.573815][T26886] vhci_hcd vhci_hcd.0: Device attached
[  397.585270][T26887] vhci_hcd: connection closed
[  397.588029][T18179] vhci_hcd: stop threads
[  397.588574][T26890] 8021q: adding VLAN 0 to HW filter on device batadv1
[  397.592836][T18179] vhci_hcd: release socket
[  397.608381][T18179] vhci_hcd: disconnect device
[  397.639005][T22802] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.641157][T26892] loop3: detected capacity change from 0 to 1024
[  397.670701][T26892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  397.690081][T26892] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28
[  397.702499][T26892] EXT4-fs (loop3): This should not happen!! Data will be lost
[  397.702499][T26892] 
[  397.712351][T26892] EXT4-fs (loop3): Total free blocks count 0
[  397.719429][T26892] EXT4-fs (loop3): Free/Dirty block details
[  397.725476][T26892] EXT4-fs (loop3): free_blocks=0
[  397.728942][T26898] loop7: detected capacity change from 0 to 512
[  397.730498][T26892] EXT4-fs (loop3): dirty_blocks=0
[  397.730515][T26892] EXT4-fs (loop3): Block reservation details
[  397.747895][T26892] EXT4-fs (loop3): i_reserved_data_blocks=0
[  397.769928][T21603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.771328][T26898] EXT4-fs (loop7): too many log groups per flexible block group
[  397.786743][T26898] EXT4-fs (loop7): failed to initialize mballoc (-12)
[  397.793666][T26898] EXT4-fs (loop7): mount failed
[  397.827457][T26898] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7150'.
[  397.853037][T26898] hsr_slave_1 (unregistering): left promiscuous mode
[  397.910338][T26908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7153'.
[  397.963308][T26911] loop7: detected capacity change from 0 to 256
[  398.184815][T26919] FAULT_INJECTION: forcing a failure.
[  398.184815][T26919] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  398.198235][T26919] CPU: 1 UID: 0 PID: 26919 Comm: syz.0.7157 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  398.209184][T26919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  398.219263][T26919] Call Trace:
[  398.222667][T26919]  <TASK>
[  398.225734][T26919]  dump_stack_lvl+0xf2/0x150
[  398.230375][T26919]  dump_stack+0x15/0x1a
[  398.234631][T26919]  should_fail_ex+0x223/0x230
[  398.239343][T26919]  should_fail_alloc_page+0xfd/0x110
[  398.244869][T26919]  __alloc_pages_noprof+0x109/0x340
[  398.250126][T26919]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  398.255558][T26919]  vma_alloc_folio_noprof+0x1a0/0x2f0
[  398.261041][T26919]  handle_mm_fault+0xdd7/0x2ac0
[  398.266018][T26919]  exc_page_fault+0x3b9/0x650
[  398.270740][T26919]  asm_exc_page_fault+0x26/0x30
[  398.275634][T26919] RIP: 0033:0x7f999402335b
[  398.280116][T26919] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01
[  398.299764][T26919] RSP: 002b:00007f99926dee10 EFLAGS: 00010246
[  398.305891][T26919] RAX: 00007f99926e0f30 RBX: 00007f999423b620 RCX: 0000000000000000
[  398.313879][T26919] RDX: 00007f99926e0f78 RSI: 00007f99940d5bd8 RDI: 00007f99926dee30
[  398.321867][T26919] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  398.329877][T26919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  398.337927][T26919] R13: 0000000000000000 R14: 00007f9994265fa0 R15: 00007ffcd1e1da98
[  398.345925][T26919]  </TASK>
[  398.349186][T26919] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  398.496383][T26929] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  398.504604][T26929] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  398.724810][T26941] loop3: detected capacity change from 0 to 512
[  398.752403][T26943] 9pnet_fd: Insufficient options for proto=fd
[  398.764839][T26941] EXT4-fs (loop3): too many log groups per flexible block group
[  398.772642][T26941] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  398.779840][T26941] EXT4-fs (loop3): mount failed
[  398.870688][T26953] FAULT_INJECTION: forcing a failure.
[  398.870688][T26953] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  398.883881][T26953] CPU: 0 UID: 0 PID: 26953 Comm: syz.2.7169 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  398.894756][T26953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  398.904890][T26953] Call Trace:
[  398.908180][T26953]  <TASK>
[  398.911126][T26953]  dump_stack_lvl+0xf2/0x150
[  398.915886][T26953]  dump_stack+0x15/0x1a
[  398.920127][T26953]  should_fail_ex+0x223/0x230
[  398.924827][T26953]  should_fail+0xb/0x10
[  398.929045][T26953]  should_fail_usercopy+0x1a/0x20
[  398.934117][T26953]  _copy_from_user+0x1e/0xb0
[  398.938756][T26953]  move_addr_to_kernel+0x82/0x120
[  398.943812][T26953]  copy_msghdr_from_user+0x271/0x2a0
[  398.949202][T26953]  __sys_sendmsg+0x13e/0x230
[  398.953868][T26953]  __x64_sys_sendmsg+0x46/0x50
[  398.958710][T26953]  x64_sys_call+0x2734/0x2dc0
[  398.963427][T26953]  do_syscall_64+0xc9/0x1c0
[  398.967985][T26953]  ? clear_bhb_loop+0x55/0xb0
[  398.972702][T26953]  ? clear_bhb_loop+0x55/0xb0
[  398.977465][T26953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.983476][T26953] RIP: 0033:0x7f090d695d29
[  398.988058][T26953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  399.007765][T26953] RSP: 002b:00007f090bd07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  399.016224][T26953] RAX: ffffffffffffffda RBX: 00007f090d885fa0 RCX: 00007f090d695d29
[  399.024373][T26953] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000004
[  399.032377][T26953] RBP: 00007f090bd07090 R08: 0000000000000000 R09: 0000000000000000
[  399.040364][T26953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  399.048377][T26953] R13: 0000000000000000 R14: 00007f090d885fa0 R15: 00007ffc99885a38
[  399.056363][T26953]  </TASK>
[  399.124920][T26951] wireguard0: entered promiscuous mode
[  399.130490][T26951] wireguard0: entered allmulticast mode
[  399.167141][T26964] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  399.175420][T26964] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  399.307362][T26976] loop4: detected capacity change from 0 to 256
[  399.334157][T26978] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  399.342493][T26978] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  399.359962][T26977] veth0_to_team: entered promiscuous mode
[  399.366016][T26977] veth0_to_team: entered allmulticast mode
[  399.459144][T26980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7179'.
[  399.478196][T26980] batadv0: entered promiscuous mode
[  399.493768][T26980] macsec1: entered promiscuous mode
[  399.499187][T26980] macsec1: entered allmulticast mode
[  399.504510][T26980] batadv0: entered allmulticast mode
[  399.569187][T26986] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10)
[  399.575823][T26986] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  399.583496][T26986] vhci_hcd vhci_hcd.0: Device attached
[  399.596427][T26988] vhci_hcd: connection closed
[  399.596726][  T151] vhci_hcd: stop threads
[  399.605964][  T151] vhci_hcd: release socket
[  399.610453][  T151] vhci_hcd: disconnect device
[  399.671611][T26993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7183'.
[  399.829879][T27001] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  399.838161][T27001] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  399.920451][T27009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7190'.
[  400.305652][T27022] loop4: detected capacity change from 0 to 2048
[  400.350204][T27022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  400.624679][T27032] FAULT_INJECTION: forcing a failure.
[  400.624679][T27032] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  400.637909][T27032] CPU: 1 UID: 0 PID: 27032 Comm: syz.3.7197 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  400.648727][T27032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  400.658808][T27032] Call Trace:
[  400.662110][T27032]  <TASK>
[  400.665057][T27032]  dump_stack_lvl+0xf2/0x150
[  400.669800][T27032]  dump_stack+0x15/0x1a
[  400.674036][T27032]  should_fail_ex+0x223/0x230
[  400.678751][T27032]  should_fail+0xb/0x10
[  400.682953][T27032]  should_fail_usercopy+0x1a/0x20
[  400.688085][T27032]  strncpy_from_user+0x25/0x210
[  400.692973][T27032]  ? kmem_cache_alloc_noprof+0x18e/0x320
[  400.698812][T27032]  ? getname_flags+0x81/0x3b0
[  400.703712][T27032]  getname_flags+0xb0/0x3b0
[  400.708250][T27032]  getname+0x17/0x20
[  400.712171][T27032]  __se_sys_statx+0x5b/0x270
[  400.716918][T27032]  ? putname+0xcf/0xf0
[  400.721104][T27032]  ? __fget_files+0x17c/0x1c0
[  400.725898][T27032]  ? fput+0x1c4/0x200
[  400.729905][T27032]  ? ksys_write+0x176/0x1b0
[  400.734462][T27032]  __x64_sys_statx+0x67/0x80
[  400.739217][T27032]  x64_sys_call+0x1031/0x2dc0
[  400.743905][T27032]  do_syscall_64+0xc9/0x1c0
[  400.748483][T27032]  ? clear_bhb_loop+0x55/0xb0
[  400.753234][T27032]  ? clear_bhb_loop+0x55/0xb0
[  400.757919][T27032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.763835][T27032] RIP: 0033:0x7f2fbe295d29
[  400.768258][T27032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  400.787889][T27032] RSP: 002b:00007f2fbc901038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c
[  400.796320][T27032] RAX: ffffffffffffffda RBX: 00007f2fbe485fa0 RCX: 00007f2fbe295d29
[  400.804368][T27032] RDX: 0000000000006000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  400.812345][T27032] RBP: 00007f2fbc901090 R08: 0000000020000a80 R09: 0000000000000000
[  400.820323][T27032] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001
[  400.828374][T27032] R13: 0000000000000001 R14: 00007f2fbe485fa0 R15: 00007fff7b16a6d8
[  400.836428][T27032]  </TASK>
[  400.869801][   T29] kauditd_printk_skb: 262 callbacks suppressed
[  400.869820][   T29] audit: type=1326 audit(400.895:51135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.4.7194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  400.899241][   T29] audit: type=1326 audit(400.895:51136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.4.7194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  400.922299][   T29] audit: type=1326 audit(400.895:51137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.4.7194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f51c97d5d63 code=0x7ffc0000
[  400.945331][   T29] audit: type=1326 audit(400.895:51138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.4.7194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f51c97d5d63 code=0x7ffc0000
[  400.968192][   T29] audit: type=1326 audit(400.895:51139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.4.7194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  400.991582][   T29] audit: type=1326 audit(400.955:51140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.4.7194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  401.017846][   T29] audit: type=1326 audit(401.045:51141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.4.7194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  401.040973][   T29] audit: type=1326 audit(401.045:51142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.4.7194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  401.064039][   T29] audit: type=1326 audit(401.045:51143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.4.7194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  401.087289][   T29] audit: type=1326 audit(401.055:51144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.4.7194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  401.440471][T27059] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  401.447119][T27059] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  401.454771][T27059] vhci_hcd vhci_hcd.0: Device attached
[  401.473928][T27066] vhci_hcd: connection closed
[  401.474072][T18193] vhci_hcd: stop threads
[  401.483096][T18193] vhci_hcd: release socket
[  401.487540][T18193] vhci_hcd: disconnect device
[  401.780564][T27084] 9pnet_fd: Insufficient options for proto=fd
[  401.855349][T24212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.939367][T27096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7223'.
[  402.328695][T27120] loop4: detected capacity change from 0 to 512
[  402.367157][T27120] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  402.373157][T27129] 9pnet_fd: Insufficient options for proto=fd
[  402.395380][T27120] EXT4-fs (loop4): 1 orphan inode deleted
[  402.401177][T27120] EXT4-fs (loop4): 1 truncate cleaned up
[  402.418531][T27120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  402.471701][T27141] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  402.479977][T27141] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  402.540261][T24212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.596395][T27143] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  402.604672][T27143] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  402.689867][T27156] FAULT_INJECTION: forcing a failure.
[  402.689867][T27156] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  402.703083][T27156] CPU: 0 UID: 0 PID: 27156 Comm: syz.3.7244 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  402.713877][T27156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  402.723951][T27156] Call Trace:
[  402.727244][T27156]  <TASK>
[  402.730193][T27156]  dump_stack_lvl+0xf2/0x150
[  402.734845][T27156]  dump_stack+0x15/0x1a
[  402.739057][T27156]  should_fail_ex+0x223/0x230
[  402.743772][T27156]  should_fail+0xb/0x10
[  402.747969][T27156]  should_fail_usercopy+0x1a/0x20
[  402.753023][T27156]  _copy_from_user+0x1e/0xb0
[  402.757771][T27156]  bpf_test_init+0x105/0x170
[  402.762457][T27156]  bpf_prog_test_run_xdp+0x321/0x8b0
[  402.767814][T27156]  ? dev_map_hash_lookup_elem+0xa2/0xd0
[  402.773464][T27156]  ? __rcu_read_unlock+0x4e/0x70
[  402.778498][T27156]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  402.784320][T27156]  bpf_prog_test_run+0x20f/0x3a0
[  402.789282][T27156]  __sys_bpf+0x400/0x7a0
[  402.793539][T27156]  __x64_sys_bpf+0x43/0x50
[  402.798059][T27156]  x64_sys_call+0x2914/0x2dc0
[  402.802818][T27156]  do_syscall_64+0xc9/0x1c0
[  402.807330][T27156]  ? clear_bhb_loop+0x55/0xb0
[  402.812018][T27156]  ? clear_bhb_loop+0x55/0xb0
[  402.816705][T27156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.822654][T27156] RIP: 0033:0x7f2fbe295d29
[  402.827074][T27156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.846778][T27156] RSP: 002b:00007f2fbc901038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  402.855223][T27156] RAX: ffffffffffffffda RBX: 00007f2fbe485fa0 RCX: 00007f2fbe295d29
[  402.863336][T27156] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a
[  402.871313][T27156] RBP: 00007f2fbc901090 R08: 0000000000000000 R09: 0000000000000000
[  402.879299][T27156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.887354][T27156] R13: 0000000000000000 R14: 00007f2fbe485fa0 R15: 00007fff7b16a6d8
[  402.895343][T27156]  </TASK>
[  402.905606][T27154] FAULT_INJECTION: forcing a failure.
[  402.905606][T27154] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  402.918742][T27154] CPU: 0 UID: 0 PID: 27154 Comm: syz.0.7243 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  402.918775][T27154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  402.918788][T27154] Call Trace:
[  402.918795][T27154]  <TASK>
[  402.918803][T27154]  dump_stack_lvl+0xf2/0x150
[  402.918845][T27154]  dump_stack+0x15/0x1a
[  402.918880][T27154]  should_fail_ex+0x223/0x230
[  402.918906][T27154]  should_fail+0xb/0x10
[  402.918937][T27154]  should_fail_usercopy+0x1a/0x20
[  402.918969][T27154]  _copy_from_user+0x1e/0xb0
[  402.919006][T27154]  kstrtouint_from_user+0x76/0xe0
[  402.919033][T27154]  ? 0xffffffff81000000
[  402.919113][T27154]  ? selinux_file_permission+0x22a/0x360
[  402.919147][T27154]  proc_fail_nth_write+0x4f/0x150
[  402.919237][T27154]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  402.919401][T27154]  vfs_write+0x281/0x920
[  402.919432][T27154]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  402.919471][T27154]  ? __fget_files+0x17c/0x1c0
[  402.919540][T27154]  ksys_write+0xe8/0x1b0
[  402.919569][T27154]  __x64_sys_write+0x42/0x50
[  402.919601][T27154]  x64_sys_call+0x287e/0x2dc0
[  402.919626][T27154]  do_syscall_64+0xc9/0x1c0
[  402.919686][T27154]  ? clear_bhb_loop+0x55/0xb0
[  402.919711][T27154]  ? clear_bhb_loop+0x55/0xb0
[  402.919736][T27154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.919774][T27154] RIP: 0033:0x7f99940747df
[  402.919832][T27154] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  402.919851][T27154] RSP: 002b:00007f99926e1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  402.919872][T27154] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f99940747df
[  402.919886][T27154] RDX: 0000000000000001 RSI: 00007f99926e10a0 RDI: 0000000000000008
[  402.919901][T27154] RBP: 00007f99926e1090 R08: 0000000000000000 R09: 0000000000000000
[  402.919964][T27154] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  402.919977][T27154] R13: 0000000000000000 R14: 00007f9994265fa0 R15: 00007ffcd1e1da98
[  402.920034][T27154]  </TASK>
[  403.060690][T27163] loop3: detected capacity change from 0 to 4096
[  403.065406][T27163] EXT4-fs: Ignoring removed nobh option
[  403.096339][T27163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.148446][T27168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7249'.
[  403.291364][T27174] loop4: detected capacity change from 0 to 1024
[  403.317083][T27163] TCP: tcp_parse_options: Illegal window scaling value 72 > 14 received
[  403.346265][T27174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  403.363442][T27174] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28
[  403.375830][T27174] EXT4-fs (loop4): This should not happen!! Data will be lost
[  403.375830][T27174] 
[  403.385532][T27174] EXT4-fs (loop4): Total free blocks count 0
[  403.391526][T27174] EXT4-fs (loop4): Free/Dirty block details
[  403.397492][T27174] EXT4-fs (loop4): free_blocks=0
[  403.402513][T27174] EXT4-fs (loop4): dirty_blocks=0
[  403.407582][T27174] EXT4-fs (loop4): Block reservation details
[  403.413584][T27174] EXT4-fs (loop4): i_reserved_data_blocks=0
[  403.442549][T27176] netlink: 'syz.0.7252': attribute type 3 has an invalid length.
[  403.472672][T24212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.603120][T21603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.701477][T27192] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  403.709759][T27192] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  403.771719][T27200] loop4: detected capacity change from 0 to 256
[  403.840626][T27203] loop3: detected capacity change from 0 to 256
[  403.847248][T27203] vfat: Unknown parameter '00000000000000000000011'
[  403.885174][T27205] netlink: 26 bytes leftover after parsing attributes in process `syz.0.7265'.
[  404.022812][T27205] syz.0.7265[27205] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  404.023003][T27205] syz.0.7265[27205] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  404.034604][T27205] syz.0.7265[27205] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  404.099089][T27211] geneve2: entered promiscuous mode
[  404.220996][T27223] loop3: detected capacity change from 0 to 512
[  404.259877][T27227] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  404.268161][T27227] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  404.281136][T27223] EXT4-fs (loop3): too many log groups per flexible block group
[  404.288879][T27223] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  404.309969][T27223] EXT4-fs (loop3): mount failed
[  404.433554][T27235] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  404.440245][T27235] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  404.448003][T27235] vhci_hcd vhci_hcd.0: Device attached
[  404.466550][T27247] vhci_hcd: connection closed
[  404.467013][T18200] vhci_hcd: stop threads
[  404.476371][T18200] vhci_hcd: release socket
[  404.480818][T18200] vhci_hcd: disconnect device
[  404.511441][T27255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7285'.
[  404.575913][T27262] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  404.584150][T27262] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  404.705969][T27275] loop4: detected capacity change from 0 to 512
[  404.755182][T27275] EXT4-fs (loop4): too many log groups per flexible block group
[  404.762963][T27275] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  404.773912][T27275] EXT4-fs (loop4): mount failed
[  404.848743][T27286] loop4: detected capacity change from 0 to 512
[  404.880195][T27286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.948348][T24212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.005575][T27297] FAULT_INJECTION: forcing a failure.
[  405.005575][T27297] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  405.018758][T27297] CPU: 1 UID: 0 PID: 27297 Comm: syz.0.7302 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  405.029646][T27297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  405.039744][T27297] Call Trace:
[  405.043029][T27297]  <TASK>
[  405.045969][T27297]  dump_stack_lvl+0xf2/0x150
[  405.050665][T27297]  dump_stack+0x15/0x1a
[  405.054896][T27297]  should_fail_ex+0x223/0x230
[  405.059590][T27297]  should_fail+0xb/0x10
[  405.063761][T27297]  should_fail_usercopy+0x1a/0x20
[  405.068818][T27297]  _copy_from_user+0x1e/0xb0
[  405.073581][T27297]  kstrtouint_from_user+0x76/0xe0
[  405.078760][T27297]  ? 0xffffffff81000000
[  405.082917][T27297]  ? selinux_file_permission+0x22a/0x360
[  405.088570][T27297]  proc_fail_nth_write+0x4f/0x150
[  405.093658][T27297]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  405.099386][T27297]  vfs_write+0x281/0x920
[  405.103722][T27297]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  405.109288][T27297]  ? __fget_files+0x17c/0x1c0
[  405.114057][T27297]  ksys_write+0xe8/0x1b0
[  405.118372][T27297]  __x64_sys_write+0x42/0x50
[  405.123073][T27297]  x64_sys_call+0x287e/0x2dc0
[  405.127785][T27297]  do_syscall_64+0xc9/0x1c0
[  405.132330][T27297]  ? clear_bhb_loop+0x55/0xb0
[  405.137189][T27297]  ? clear_bhb_loop+0x55/0xb0
[  405.141877][T27297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.147882][T27297] RIP: 0033:0x7f99940747df
[  405.152321][T27297] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  405.171936][T27297] RSP: 002b:00007f99926e1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  405.180572][T27297] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f99940747df
[  405.188598][T27297] RDX: 0000000000000001 RSI: 00007f99926e10a0 RDI: 0000000000000008
[  405.196688][T27297] RBP: 00007f99926e1090 R08: 0000000000000000 R09: 0000000000000000
[  405.204663][T27297] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  405.212674][T27297] R13: 0000000000000000 R14: 00007f9994265fa0 R15: 00007ffcd1e1da98
[  405.220695][T27297]  </TASK>
[  405.327553][T27306] loop4: detected capacity change from 0 to 2048
[  405.358968][T27306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  405.373563][T27306] FAULT_INJECTION: forcing a failure.
[  405.373563][T27306] name failslab, interval 1, probability 0, space 0, times 0
[  405.386277][T27306] CPU: 0 UID: 0 PID: 27306 Comm: syz.4.7305 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  405.397168][T27306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  405.407238][T27306] Call Trace:
[  405.410523][T27306]  <TASK>
[  405.413476][T27306]  dump_stack_lvl+0xf2/0x150
[  405.418097][T27306]  dump_stack+0x15/0x1a
[  405.422314][T27306]  should_fail_ex+0x223/0x230
[  405.427038][T27306]  should_failslab+0x8f/0xb0
[  405.431710][T27306]  __kmalloc_noprof+0xab/0x3f0
[  405.436502][T27306]  ? ext4_find_extent+0x172/0x7c0
[  405.441541][T27306]  ext4_find_extent+0x172/0x7c0
[  405.446488][T27306]  ext4_ext_map_blocks+0x11f/0x35c0
[  405.451703][T27306]  ? mod_objcg_state+0x2ea/0x4f0
[  405.456699][T27306]  ? kmem_cache_alloc_lru_noprof+0x230/0x320
[  405.462696][T27306]  ? down_read+0x171/0x4b0
[  405.467134][T27306]  ext4_map_query_blocks+0x71/0x180
[  405.472420][T27306]  ? ext4_da_get_block_prep+0x214/0xbb0
[  405.477987][T27306]  ext4_da_get_block_prep+0x263/0xbb0
[  405.483537][T27306]  ext4_block_write_begin+0x34f/0x9c0
[  405.488933][T27306]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  405.494935][T27306]  ext4_da_write_begin+0x318/0x540
[  405.500152][T27306]  generic_perform_write+0x1a8/0x4a0
[  405.505525][T27306]  ? __mark_inode_dirty+0x45e/0x7e0
[  405.510753][T27306]  ext4_buffered_write_iter+0x1ea/0x370
[  405.516356][T27306]  ext4_file_write_iter+0x383/0xf20
[  405.521617][T27306]  ? _raw_spin_lock_irqsave+0x3c/0xb0
[  405.527075][T27306]  ? _parse_integer_limit+0x167/0x180
[  405.532456][T27306]  ? _parse_integer+0x27/0x30
[  405.537194][T27306]  ? kstrtoull+0x110/0x140
[  405.541676][T27306]  ? __import_iovec+0x443/0x560
[  405.546672][T27306]  do_iter_readv_writev+0x394/0x450
[  405.551891][T27306]  vfs_writev+0x2d4/0x880
[  405.556328][T27306]  ? proc_fail_nth_write+0x12a/0x150
[  405.561686][T27306]  __se_sys_pwritev2+0x100/0x1c0
[  405.566757][T27306]  __x64_sys_pwritev2+0x78/0x90
[  405.571686][T27306]  x64_sys_call+0x2afe/0x2dc0
[  405.576373][T27306]  do_syscall_64+0xc9/0x1c0
[  405.580889][T27306]  ? clear_bhb_loop+0x55/0xb0
[  405.585625][T27306]  ? clear_bhb_loop+0x55/0xb0
[  405.590311][T27306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.596338][T27306] RIP: 0033:0x7f51c97d5d29
[  405.600773][T27306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  405.620433][T27306] RSP: 002b:00007f51c7e47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  405.628956][T27306] RAX: ffffffffffffffda RBX: 00007f51c99c5fa0 RCX: 00007f51c97d5d29
[  405.636945][T27306] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000004
[  405.644926][T27306] RBP: 00007f51c7e47090 R08: 0000000000000000 R09: 0000000000000000
[  405.652907][T27306] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000001
[  405.660883][T27306] R13: 0000000000000000 R14: 00007f51c99c5fa0 R15: 00007ffee9b6ba98
[  405.668871][T27306]  </TASK>
[  405.688201][T27302] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  405.694904][T27302] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  405.702629][T27302] vhci_hcd vhci_hcd.0: Device attached
[  405.710241][T27315] vhci_hcd: connection closed
[  405.710366][T18179] vhci_hcd: stop threads
[  405.719615][T18179] vhci_hcd: release socket
[  405.724042][T18179] vhci_hcd: disconnect device
[  405.730969][T27308] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  405.737624][T27308] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  405.745300][T27308] vhci_hcd vhci_hcd.0: Device attached
[  405.752481][T24212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.763151][T27318] vhci_hcd: connection closed
[  405.763582][T18171] vhci_hcd: stop threads
[  405.772671][T18171] vhci_hcd: release socket
[  405.777127][T18171] vhci_hcd: disconnect device
[  405.792085][T27314] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7309'.
[  405.808739][T27321] loop4: detected capacity change from 0 to 512
[  405.830452][T27321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.921198][T24212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.044556][T27334] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  406.051221][T27334] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  406.058884][T27334] vhci_hcd vhci_hcd.0: Device attached
[  406.094464][T27338] vhci_hcd: connection closed
[  406.094756][T18179] vhci_hcd: stop threads
[  406.103770][T18179] vhci_hcd: release socket
[  406.108249][T18179] vhci_hcd: disconnect device
[  406.174059][   T29] kauditd_printk_skb: 547 callbacks suppressed
[  406.174076][   T29] audit: type=1326 audit(406.195:51690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27347 comm="syz.4.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  406.210502][   T29] audit: type=1326 audit(406.205:51691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27347 comm="syz.4.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  406.233578][   T29] audit: type=1326 audit(406.205:51692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27347 comm="syz.4.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  406.256593][   T29] audit: type=1326 audit(406.205:51693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27347 comm="syz.4.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  406.279703][   T29] audit: type=1326 audit(406.205:51694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27347 comm="syz.4.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f51c97d47df code=0x7ffc0000
[  406.302761][   T29] audit: type=1326 audit(406.205:51695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27347 comm="syz.4.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  406.325790][   T29] audit: type=1326 audit(406.205:51696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27347 comm="syz.4.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  406.348721][   T29] audit: type=1326 audit(406.205:51697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27347 comm="syz.4.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  406.371831][   T29] audit: type=1326 audit(406.205:51698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27347 comm="syz.4.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  406.371865][   T29] audit: type=1326 audit(406.205:51699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27347 comm="syz.4.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  406.423042][T27350] netlink: 256 bytes leftover after parsing attributes in process `syz.7.7320'.
[  406.436103][T27350] atomic_op ffff88815804ed28 conn xmit_atomic 0000000000000000
[  406.459043][T27354] loop4: detected capacity change from 0 to 512
[  406.476115][T27354] EXT4-fs (loop4): too many log groups per flexible block group
[  406.483832][T27354] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  406.490694][T27354] EXT4-fs (loop4): mount failed
[  406.559398][T27364] loop4: detected capacity change from 0 to 512
[  406.589975][T27364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  406.668331][T24212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.823720][T27386] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2579 sclass=netlink_xfrm_socket pid=27386 comm=syz.2.7332
[  406.871344][T27385] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  406.878058][T27385] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  406.885743][T27385] vhci_hcd vhci_hcd.0: Device attached
[  406.897205][T27388] vhci_hcd: connection closed
[  406.897493][  T151] vhci_hcd: stop threads
[  406.906524][  T151] vhci_hcd: release socket
[  406.910989][  T151] vhci_hcd: disconnect device
[  407.098488][T27391] loop7: detected capacity change from 0 to 512
[  407.109795][T27391] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  407.121828][T27391] EXT4-fs (loop7): 1 truncate cleaned up
[  407.128658][T27391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.142023][T27391] FAULT_INJECTION: forcing a failure.
[  407.142023][T27391] name failslab, interval 1, probability 0, space 0, times 0
[  407.154713][T27391] CPU: 0 UID: 0 PID: 27391 Comm: syz.7.7334 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  407.165574][T27391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  407.175723][T27391] Call Trace:
[  407.179034][T27391]  <TASK>
[  407.182000][T27391]  dump_stack_lvl+0xf2/0x150
[  407.186696][T27391]  dump_stack+0x15/0x1a
[  407.190966][T27391]  should_fail_ex+0x223/0x230
[  407.195672][T27391]  ? __se_sys_mount+0xf7/0x2d0
[  407.200560][T27391]  should_failslab+0x8f/0xb0
[  407.205180][T27391]  __kmalloc_cache_noprof+0x4e/0x320
[  407.210491][T27391]  ? memdup_user+0x9f/0xc0
[  407.214940][T27391]  __se_sys_mount+0xf7/0x2d0
[  407.219622][T27391]  ? fput+0x1c4/0x200
[  407.223621][T27391]  ? ksys_write+0x176/0x1b0
[  407.228214][T27391]  __x64_sys_mount+0x67/0x80
[  407.232855][T27391]  x64_sys_call+0x2c84/0x2dc0
[  407.237604][T27391]  do_syscall_64+0xc9/0x1c0
[  407.242177][T27391]  ? clear_bhb_loop+0x55/0xb0
[  407.246889][T27391]  ? clear_bhb_loop+0x55/0xb0
[  407.251579][T27391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.257645][T27391] RIP: 0033:0x7f4cdde95d29
[  407.262159][T27391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  407.281796][T27391] RSP: 002b:00007f4cdc507038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  407.290313][T27391] RAX: ffffffffffffffda RBX: 00007f4cde085fa0 RCX: 00007f4cdde95d29
[  407.298336][T27391] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000
[  407.306463][T27391] RBP: 00007f4cdc507090 R08: 0000000020000400 R09: 0000000000000000
[  407.314542][T27391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.322651][T27391] R13: 0000000000000000 R14: 00007f4cde085fa0 R15: 00007fff74fe1788
[  407.330702][T27391]  </TASK>
[  407.356747][T22802] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.389630][T27394] loop7: detected capacity change from 0 to 1024
[  407.412630][T27394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  407.432361][T27394] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28
[  407.444691][T27394] EXT4-fs (loop7): This should not happen!! Data will be lost
[  407.444691][T27394] 
[  407.454522][T27394] EXT4-fs (loop7): Total free blocks count 0
[  407.460531][T27394] EXT4-fs (loop7): Free/Dirty block details
[  407.466499][T27394] EXT4-fs (loop7): free_blocks=0
[  407.471451][T27394] EXT4-fs (loop7): dirty_blocks=0
[  407.476543][T27394] EXT4-fs (loop7): Block reservation details
[  407.482636][T27394] EXT4-fs (loop7): i_reserved_data_blocks=0
[  407.520584][T22802] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.572687][T27405] loop3: detected capacity change from 0 to 512
[  407.619295][T27405] ext4: Bad value for 'commit'
[  407.751375][T27422] loop4: detected capacity change from 0 to 1024
[  407.775559][T27417] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7346'.
[  407.799619][T27422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  407.865582][T27422] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28
[  407.878011][T27422] EXT4-fs (loop4): This should not happen!! Data will be lost
[  407.878011][T27422] 
[  407.887696][T27422] EXT4-fs (loop4): Total free blocks count 0
[  407.893686][T27422] EXT4-fs (loop4): Free/Dirty block details
[  407.899661][T27422] EXT4-fs (loop4): free_blocks=0
[  407.905068][T27422] EXT4-fs (loop4): dirty_blocks=0
[  407.910118][T27422] EXT4-fs (loop4): Block reservation details
[  407.916155][T27422] EXT4-fs (loop4): i_reserved_data_blocks=0
[  407.996049][T24212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.032571][T27441] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  408.039223][T27441] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  408.046954][T27441] vhci_hcd vhci_hcd.0: Device attached
[  408.085048][T27445] vhci_hcd: connection closed
[  408.085837][  T151] vhci_hcd: stop threads
[  408.094859][  T151] vhci_hcd: release socket
[  408.099399][  T151] vhci_hcd: disconnect device
[  408.272367][T27454] loop4: detected capacity change from 0 to 164
[  408.309541][T27454] Unable to read rock-ridge attributes
[  408.472123][T27467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7362'.
[  408.643710][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4
[  408.651427][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2
[  408.684703][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  408.692477][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  408.700268][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  408.707285][T27476] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[  408.707948][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  408.724694][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  408.732447][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  408.740184][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  408.747883][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  408.755795][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  408.763465][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  408.771266][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  408.778946][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  408.786745][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  408.794465][    T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0
[  408.810853][    T8] hid-generic 0000:3000000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  408.967842][T27486] 9pnet_fd: Insufficient options for proto=fd
[  409.080410][T27494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7373'.
[  409.221559][T27502] loop4: detected capacity change from 0 to 128
[  409.279735][T27504] lo speed is unknown, defaulting to 1000
[  409.303577][T27502] syz.4.7376: attempt to access beyond end of device
[  409.303577][T27502] loop4: rw=2049, sector=153, nr_sectors = 888 limit=128
[  409.442299][T27516] loop4: detected capacity change from 0 to 512
[  409.449449][T27514] 9pnet_fd: Insufficient options for proto=fd
[  409.498802][T27522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7384'.
[  409.516253][T27516] EXT4-fs (loop4): too many log groups per flexible block group
[  409.524190][T27516] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  409.531202][T27516] EXT4-fs (loop4): mount failed
[  409.630800][T27538] FAULT_INJECTION: forcing a failure.
[  409.630800][T27538] name failslab, interval 1, probability 0, space 0, times 0
[  409.643517][T27538] CPU: 1 UID: 0 PID: 27538 Comm: syz.0.7390 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  409.654314][T27538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  409.664444][T27538] Call Trace:
[  409.667744][T27538]  <TASK>
[  409.670696][T27538]  dump_stack_lvl+0xf2/0x150
[  409.675555][T27538]  dump_stack+0x15/0x1a
[  409.679738][T27538]  should_fail_ex+0x223/0x230
[  409.684579][T27538]  should_failslab+0x8f/0xb0
[  409.689275][T27538]  __kmalloc_noprof+0xab/0x3f0
[  409.694208][T27538]  ? iter_file_splice_write+0x102/0x980
[  409.699826][T27538]  iter_file_splice_write+0x102/0x980
[  409.699878][T27538]  ? splice_folio_into_pipe+0x262/0x280
[  409.699914][T27538]  ? shmem_file_splice_read+0x58a/0x5d0
[  409.699981][T27538]  ? __pfx_iter_file_splice_write+0x10/0x10
[  409.700017][T27538]  direct_splice_actor+0x160/0x2c0
[  409.700074][T27538]  splice_direct_to_actor+0x302/0x670
[  409.700103][T27538]  ? __pfx_direct_splice_actor+0x10/0x10
[  409.700140][T27538]  do_splice_direct+0xd7/0x150
[  409.700202][T27538]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  409.700305][T27538]  do_sendfile+0x398/0x660
[  409.700330][T27538]  __x64_sys_sendfile64+0x110/0x150
[  409.700382][T27538]  x64_sys_call+0xfbd/0x2dc0
[  409.700440][T27538]  do_syscall_64+0xc9/0x1c0
[  409.700461][T27538]  ? clear_bhb_loop+0x55/0xb0
[  409.700486][T27538]  ? clear_bhb_loop+0x55/0xb0
[  409.700513][T27538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.783656][T27538] RIP: 0033:0x7f9994075d29
[  409.788081][T27538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.807710][T27538] RSP: 002b:00007f99926e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  409.816184][T27538] RAX: ffffffffffffffda RBX: 00007f9994265fa0 RCX: 00007f9994075d29
[  409.824158][T27538] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  409.832135][T27538] RBP: 00007f99926e1090 R08: 0000000000000000 R09: 0000000000000000
[  409.840173][T27538] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000001
[  409.848147][T27538] R13: 0000000000000000 R14: 00007f9994265fa0 R15: 00007ffcd1e1da98
[  409.856133][T27538]  </TASK>
[  409.941272][T27543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7391'.
[  409.982618][T27548] loop7: detected capacity change from 0 to 256
[  410.010660][T27549] bridge_slave_0: left allmulticast mode
[  410.016580][T27549] bridge_slave_0: left promiscuous mode
[  410.022396][T27549] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.023210][T27551] 9pnet_fd: Insufficient options for proto=fd
[  410.060468][T27549] bridge_slave_1: left allmulticast mode
[  410.066371][T27549] bridge_slave_1: left promiscuous mode
[  410.072185][T27549] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.113967][T27549] bond0: (slave bond_slave_0): Releasing backup interface
[  410.150584][T27549] bond0: (slave bond_slave_1): Releasing backup interface
[  410.167677][T27549] team0: Port device team_slave_0 removed
[  410.193520][T27549] team0: Port device team_slave_1 removed
[  410.194218][T27566] loop3: detected capacity change from 0 to 512
[  410.200689][T27549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.213236][T27549] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.222796][T27549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.230348][T27549] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.256467][T27566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.263075][T27549] batman_adv: batadv0: Interface deactivated: erspan1
[  410.276117][T27549] batman_adv: batadv0: Removing interface: erspan1
[  410.353674][T21603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.410819][T27586] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  410.419153][T27586] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  410.423449][T27588] 9pnet_fd: Insufficient options for proto=fd
[  410.606715][T27612] loop4: detected capacity change from 0 to 2048
[  410.659439][T27620] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  410.667748][T27620] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  410.678200][T27612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  410.695479][T27612] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  410.709840][T27612] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  410.722252][T27612] EXT4-fs (loop4): This should not happen!! Data will be lost
[  410.722252][T27612] 
[  410.731945][T27612] EXT4-fs (loop4): Total free blocks count 0
[  410.737995][T27612] EXT4-fs (loop4): Free/Dirty block details
[  410.740777][T27627] 9pnet_fd: Insufficient options for proto=fd
[  410.743891][T27612] EXT4-fs (loop4): free_blocks=4096
[  410.743920][T27612] EXT4-fs (loop4): dirty_blocks=16
[  410.743934][T27612] EXT4-fs (loop4): Block reservation details
[  410.766672][T27612] EXT4-fs (loop4): i_reserved_data_blocks=1
[  410.773343][T27628] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  410.793341][T27631] FAULT_INJECTION: forcing a failure.
[  410.793341][T27631] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  410.806650][T27631] CPU: 0 UID: 0 PID: 27631 Comm: syz.2.7426 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  410.817447][T27631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  410.827575][T27631] Call Trace:
[  410.830889][T27631]  <TASK>
[  410.833842][T27631]  dump_stack_lvl+0xf2/0x150
[  410.838495][T27631]  dump_stack+0x15/0x1a
[  410.842748][T27631]  should_fail_ex+0x223/0x230
[  410.847454][T27631]  should_fail+0xb/0x10
[  410.851698][T27631]  should_fail_usercopy+0x1a/0x20
[  410.856843][T27631]  _copy_from_user+0x1e/0xb0
[  410.861468][T27631]  ipv6_set_opt_hdr+0x18c/0x610
[  410.866431][T27631]  do_ipv6_setsockopt+0x1253/0x2250
[  410.871660][T27631]  ? __rcu_read_unlock+0x4e/0x70
[  410.876628][T27631]  ? avc_has_perm_noaudit+0x1cc/0x210
[  410.882092][T27631]  ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0
[  410.888434][T27631]  ipv6_setsockopt+0x57/0x130
[  410.893193][T27631]  rawv6_setsockopt+0x21e/0x410
[  410.898076][T27631]  sock_common_setsockopt+0x64/0x80
[  410.903362][T27631]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  410.909357][T27631]  __sys_setsockopt+0x187/0x200
[  410.914237][T27631]  __x64_sys_setsockopt+0x66/0x80
[  410.919336][T27631]  x64_sys_call+0x282e/0x2dc0
[  410.924019][T27631]  do_syscall_64+0xc9/0x1c0
[  410.928520][T27631]  ? clear_bhb_loop+0x55/0xb0
[  410.933240][T27631]  ? clear_bhb_loop+0x55/0xb0
[  410.937989][T27631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.943931][T27631] RIP: 0033:0x7f090d695d29
[  410.948354][T27631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  410.968051][T27631] RSP: 002b:00007f090bd07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  410.976577][T27631] RAX: ffffffffffffffda RBX: 00007f090d885fa0 RCX: 00007f090d695d29
[  410.984549][T27631] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000003
[  410.992612][T27631] RBP: 00007f090bd07090 R08: 0000000000000018 R09: 0000000000000000
[  411.000675][T27631] R10: 0000000020000f00 R11: 0000000000000246 R12: 0000000000000001
[  411.008700][T27631] R13: 0000000000000000 R14: 00007f090d885fa0 R15: 00007ffc99885a38
[  411.016694][T27631]  </TASK>
[  411.107954][T27641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27641 comm=syz.7.7430
[  411.173335][T27652] FAULT_INJECTION: forcing a failure.
[  411.173335][T27652] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  411.186575][T27652] CPU: 0 UID: 0 PID: 27652 Comm: syz.0.7431 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  411.195166][   T29] kauditd_printk_skb: 625 callbacks suppressed
[  411.195186][   T29] audit: type=1400 audit(411.215:52325): avc:  denied  { mount } for  pid=27656 comm="syz.4.7436" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  411.197377][T27652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  411.197396][T27652] Call Trace:
[  411.238333][T27652]  <TASK>
[  411.241268][T27652]  dump_stack_lvl+0xf2/0x150
[  411.245883][T27652]  dump_stack+0x15/0x1a
[  411.250098][T27652]  should_fail_ex+0x223/0x230
[  411.254829][T27652]  should_fail+0xb/0x10
[  411.259161][T27652]  should_fail_usercopy+0x1a/0x20
[  411.264250][T27652]  _copy_to_user+0x20/0xa0
[  411.268687][T27652]  do_pagemap_cmd+0x642/0x9a0
[  411.273388][T27652]  ? __pfx_do_pagemap_cmd+0x10/0x10
[  411.278670][T27652]  __se_sys_ioctl+0xc9/0x140
[  411.283282][T27652]  __x64_sys_ioctl+0x43/0x50
[  411.287924][T27652]  x64_sys_call+0x1690/0x2dc0
[  411.292616][T27652]  do_syscall_64+0xc9/0x1c0
[  411.297126][T27652]  ? clear_bhb_loop+0x55/0xb0
[  411.301873][T27652]  ? clear_bhb_loop+0x55/0xb0
[  411.306567][T27652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.312505][T27652] RIP: 0033:0x7f9994075d29
[  411.316944][T27652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  411.336676][T27652] RSP: 002b:00007f99926c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  411.345112][T27652] RAX: ffffffffffffffda RBX: 00007f9994266080 RCX: 00007f9994075d29
[  411.353155][T27652] RDX: 0000000020000100 RSI: 00000000c0606610 RDI: 0000000000000007
[  411.361143][T27652] RBP: 00007f99926c0090 R08: 0000000000000000 R09: 0000000000000000
[  411.369183][T27652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  411.377281][T27652] R13: 0000000000000000 R14: 00007f9994266080 R15: 00007ffcd1e1da98
[  411.385272][T27652]  </TASK>
[  411.472110][   T29] audit: type=1400 audit(411.495:52326): avc:  denied  { remount } for  pid=27656 comm="syz.4.7436" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  411.472116][T27666] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  411.506758][T27662] loop3: detected capacity change from 0 to 2048
[  411.525861][   T29] audit: type=1400 audit(411.555:52327): avc:  denied  { unmount } for  pid=24212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  411.577475][T27662]  loop3: p2 p3 p7
[  411.597462][   T29] audit: type=1326 audit(411.625:52328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.4.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  411.620541][   T29] audit: type=1326 audit(411.625:52329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.4.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  411.643704][   T29] audit: type=1326 audit(411.625:52330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.4.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  411.666716][   T29] audit: type=1326 audit(411.625:52331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.4.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f51c97d47df code=0x7ffc0000
[  411.684680][T27667] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  411.689568][   T29] audit: type=1326 audit(411.625:52332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.4.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  411.689643][   T29] audit: type=1326 audit(411.625:52333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.4.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  411.697799][T27667] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  411.720705][   T29] audit: type=1326 audit(411.625:52334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.4.7440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c97d5d29 code=0x7ffc0000
[  411.891010][T26145] udevd[26145]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  411.903101][ T5061] udevd[5061]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  411.916879][ T5391] udevd[5391]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  411.995195][T27678] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  412.001865][T27678] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  412.009555][T27678] vhci_hcd vhci_hcd.0: Device attached
[  412.027649][T27684] vhci_hcd: connection closed
[  412.033401][ T9463] vhci_hcd: stop threads
[  412.042533][ T9463] vhci_hcd: release socket
[  412.047079][ T9463] vhci_hcd: disconnect device
[  412.086441][T27693] batadv_slave_0: entered promiscuous mode
[  412.117129][T27690] batadv_slave_0: left promiscuous mode
[  412.232382][T27698] loop3: detected capacity change from 0 to 2048
[  412.252488][T27704] netlink: 'syz.0.7452': attribute type 2 has an invalid length.
[  412.271334][T27704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7452'.
[  412.315460][T27698] EXT4-fs: Ignoring removed i_version option
[  412.338455][T27698] ext4: Unknown parameter 'fsuuid'
[  412.431763][T27689] loop3: detected capacity change from 0 to 256
[  412.450428][T27689] FAT-fs (loop3): Directory bread(block 1285) failed
[  412.455352][T27713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7456'.
[  412.462021][T27689] FAT-fs (loop3): Directory bread(block 1285) failed
[  412.480525][T27689] FAT-fs (loop3): FAT read failed (blocknr 1281)
[  412.494096][T27689] dvmrp0: entered allmulticast mode
[  412.518953][T27689] dvmrp0: left allmulticast mode
[  412.535199][T27723] xt_connbytes: Forcing CT accounting to be enabled
[  412.541943][T27723] x_tables: ip_tables: icmp match: only valid for protocol 1
[  412.588518][ T5391] ==================================================================
[  412.596660][ T5391] BUG: KCSAN: data-race in set_nlink / set_nlink
[  412.603138][ T5391] 
[  412.605483][ T5391] read to 0xffff888106431858 of 4 bytes by task 3000 on cpu 1:
[  412.613044][ T5391]  set_nlink+0x2b/0xb0
[  412.617160][ T5391]  kernfs_iop_permission+0x1c8/0x210
[  412.622472][ T5391]  inode_permission+0x18c/0x300
[  412.627346][ T5391]  link_path_walk+0x14b/0x820
[  412.632051][ T5391]  path_lookupat+0x72/0x2b0
[  412.636577][ T5391]  filename_lookup+0x150/0x340
[  412.641368][ T5391]  vfs_statx+0x9a/0x170
[  412.645541][ T5391]  __se_sys_newfstatat+0xdc/0x300
[  412.650593][ T5391]  __x64_sys_newfstatat+0x55/0x70
[  412.655646][ T5391]  x64_sys_call+0x236d/0x2dc0
[  412.660353][ T5391]  do_syscall_64+0xc9/0x1c0
[  412.664883][ T5391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.670806][ T5391] 
[  412.673137][ T5391] write to 0xffff888106431858 of 4 bytes by task 5391 on cpu 0:
[  412.680784][ T5391]  set_nlink+0x98/0xb0
[  412.684884][ T5391]  kernfs_iop_permission+0x1c8/0x210
[  412.690200][ T5391]  inode_permission+0x18c/0x300
[  412.695076][ T5391]  link_path_walk+0x14b/0x820
[  412.699793][ T5391]  path_openat+0x1af/0x1fa0
[  412.704316][ T5391]  do_filp_open+0x107/0x230
[  412.708850][ T5391]  do_sys_openat2+0xab/0x120
[  412.713464][ T5391]  __x64_sys_openat+0xf3/0x120
[  412.718246][ T5391]  x64_sys_call+0x2b30/0x2dc0
[  412.722945][ T5391]  do_syscall_64+0xc9/0x1c0
[  412.727460][ T5391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.733393][ T5391] 
[  412.735719][ T5391] value changed: 0x00000009 -> 0x00000008
[  412.741435][ T5391] 
[  412.743768][ T5391] Reported by Kernel Concurrency Sanitizer on:
[  412.749928][ T5391] CPU: 0 UID: 0 PID: 5391 Comm: udevd Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  412.760185][ T5391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  412.770254][ T5391] ==================================================================
[  412.902975][T27729] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  412.911466][T27729] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  413.124289][T27711] FAULT_INJECTION: forcing a failure.
[  413.124289][T27711] name fail_futex, interval 1, probability 0, space 0, times 1
[  413.137163][T27711] CPU: 0 UID: 0 PID: 27711 Comm: syz.7.7454 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  413.147947][T27711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  413.158016][T27711] Call Trace:
[  413.161296][T27711]  <TASK>
[  413.164267][T27711]  dump_stack_lvl+0xf2/0x150
[  413.168920][T27711]  dump_stack+0x15/0x1a
[  413.173113][T27711]  should_fail_ex+0x223/0x230
[  413.177806][T27711]  should_fail+0xb/0x10
[  413.182068][T27711]  get_futex_key+0x135/0x740
[  413.186738][T27711]  futex_wake+0x7d/0x330
[  413.191062][T27711]  do_futex+0x2ab/0x370
[  413.195289][T27711]  mm_release+0xb7/0x1e0
[  413.199547][T27711]  exit_mm_release+0x25/0x30
[  413.204213][T27711]  exit_mm+0x38/0x190
[  413.208237][T27711]  do_exit+0x559/0x17f0
[  413.212489][T27711]  ? do_recvmmsg+0x64e/0x6d0
[  413.217092][T27711]  do_group_exit+0x102/0x150
[  413.221887][T27711]  ? get_signal+0xeb1/0x1000
[  413.226486][T27711]  get_signal+0xeb9/0x1000
[  413.230915][T27711]  arch_do_signal_or_restart+0x95/0x4b0
[  413.236489][T27711]  syscall_exit_to_user_mode+0x62/0x120
[  413.242169][T27711]  do_syscall_64+0xd6/0x1c0
[  413.246671][T27711]  ? clear_bhb_loop+0x55/0xb0
[  413.251408][T27711]  ? clear_bhb_loop+0x55/0xb0
[  413.256173][T27711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.262288][T27711] RIP: 0033:0x7f4cdde95d29
[  413.266755][T27711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  413.286401][T27711] RSP: 002b:00007f4cdc4e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  413.294825][T27711] RAX: fffffffffffffe00 RBX: 00007f4cde086080 RCX: 00007f4cdde95d29
[  413.302897][T27711] RDX: 0000000000000002 RSI: 0000000020000d00 RDI: 0000000000000003
[  413.310868][T27711] RBP: 00007f4cdc4e6090 R08: 0000000000000000 R09: 0000000000000000
[  413.318992][T27711] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001
[  413.327011][T27711] R13: 0000000000000001 R14: 00007f4cde086080 R15: 00007fff74fe1788
[  413.334988][T27711]  </TASK>